fix: generate correct sarif for scan result without vulns (#68)

Author: tembleking

src/sarif.ts

@@ -53,7 +53,7 @@ export function generateSARIFReport(data: Report, groupByPackage: boolean) {
   fs.writeFileSync("./sarif.json", JSON.stringify(sarifOutput, null, 2));
 }
 
-function vulnerabilities2SARIF(data: Report, groupByPackage: boolean) {
+export function vulnerabilities2SARIF(data: Report, groupByPackage: boolean) {
   let rules: SARIFRule[] = [];
   let results: SARIFResult[] = [];
 
@@ -63,10 +63,6 @@ function vulnerabilities2SARIF(data: Report, groupByPackage: boolean) {
     [rules, results] = vulnerabilities2SARIFRes(data)
   }
 
-  if (!rules.length || !results.length) {
-    return {};
-  }
-
   const runs = [{
     tool: {
       driver: {