SARIF 2.1.0 output: a mechanical adapter over the findings list for GitHub code-scanning annotations. Global findings (no file) anchor to the committed snapshot artifact — the file they are actually about.
@spec render([Cerbero.Finding.t()], map(), String.t() | nil, %{ required(String.t()) => String.t() }) :: String.t()