It seems that after v0.29.0 the SARIF tests have started to fail. Need to look into what has changed in terms of output from Trivy.

Relevant test: https://github.com/aquasecurity/trivy-action/blob/master/test/test.bats#L12-L17

Steps to tackle this:

1. Run tests locally using bats -r .
2. See the test failing
3. Verify the golden output vs what is actual output from Trivy