* fix: handle go test json lines and generate sarif * fix(ci): clean up linting
* fix: update dependencies * fix: include package failures and enable trivy