Breaking change in SARIF (original) (raw)

Hi, this commit #1668 seems to be a breaking change and was not versioned.

The scorecard project has an Action that is now completely broken since yesterday, see an example on this project https://github.com/google/osv.dev/actions/runs/5075329151/jobs/9116430536.

Is there a way to revert this change and put it behind a semver versioning?

/cc @josepalafox