Expand description
SARIF 2.1.0 serialization for the analysis findings.
Output is deterministic and safe to publish to code-scanning dashboards. Message text is plain (SARIF consumers render it as text, not HTML), but we still flatten control characters defensively.