Allow users to use codeql-action/upload-sarif action for SARIF upload

[jamacku]

Type of issue

Feature Request

Description

Let's try one more time to use codeql-action/upload-sarif action for uploading SARIF to GitHub.

From what I saw in other actions, it should also work for forks.

Describe the solution you'd like

codeql-action/upload-sarif: https://github.com/github/codeql-action/tree/main/upload-sarif
actions/upload-artifact: https://github.com/actions/upload-artifact
docs: https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/uploading-a-sarif-file-to-github
example: https://github.com/mattermost/mattermost-server/blob/master/.github/workflows/scorecards-analysis.yml

[jamacku]

To maintain backward compatibility, we will be using the current solution for SARIF uploads, but we will allow users to opt-out and use other solutions (e.g. github/codeql-action/upload-sarif GitHub Action)