fix(1375): report code findings that are OPEN, not results in the SARIF (#1376)