https://github.com/owenrumney/go-sarif contains an implementation of the SARIF standard. Maybe it's worth considering replacing the part of the code with this instead? https://github.com/zegl/kube-score/blob/master/sarif/sarif.go It's not much, though.