No explanation of how to use sarif

[jsoref]

clusterfuzzlite/docs/running-clusterfuzzlite/github_actions.md

Line 160 in 40f9a53

output-sarif: true

https://github.com/search?q=repo%3Agoogle%2Fclusterfuzzlite%20upload-sarif&type=code has 0 hits.

For comparison, oss-fuzz has an example:
https://github.com/google/oss-fuzz/blob/aef3ab9d5fcca1cb6a975b5ce42bf819c2f726ec/docs/getting-started/continuous_integration.md?plain=1#L85-L104

There are very few instances of someone trying to upload a sarif file:
https://github.com/search?q=%22google%2Fclusterfuzzlite%22+sarif+upload-artifact+results.sarif+path%3A%2F%5E%5C.github%5C%2Fworkflows%5C%2F%2F&type=code
https://github.com/ByronWilliamsCPA/audio-processor/blob/bd6477e60b2a5903498fe1cacf35997aaf7c360f/.github/workflows/cifuzzy.yml#L58-L73

I have no idea if this is correct, but I'd love to know.

[jsoref]

In theory, it appears that the correct way to use it would be:

    - name: Upload SARIF
      if: always()
      uses: github/codeql-action/upload-sarif@7434149006143a4d75b82a2f411ef15b03ccc2d7 # v4.31.9
      with:
        sarif_file: cifuzz-sarif/results.sarif
        category: fuzzing-${{  matrix.sanitizer  }}

    - name: Upload SARIF (artifact)
      if: always()
      uses: actions/upload-artifact@v6
      with:
        name: sarif
        path: cifuzz-sarif/results.sarif

• The latter is pretty important, since the sarif output doesn't appear to be particularly compatible with github's sarif endpoint... sarif output is unhelpful/confusing - uri compiler-rt/lib/fuzzer/FuzzerTracePC.h #148