Fix Snyk Security Scan job failure by generating SARIF and updating upload action

[Copilot]

The scheduled Snyk Security Scan workflow was failing in Actions due to two workflow-level issues: SARIF upload used a deprecated CodeQL action version, and the upload step expected snyk.sarif even when it was not produced.

• Workflow compatibility update

  • Switched SARIF upload action from github/codeql-action/upload-sarif@v2 to @v3 to align with current GitHub Actions requirements.

• Ensure SARIF is actually produced

  • Updated the Snyk scan invocation to emit SARIF output:
    • --sarif-file-output=snyk.sarif

• Prevent missing-file upload failures

  • Added a file-existence guard to the upload step so it only runs when snyk.sarif is present.

- name: Run Snyk scan
  uses: snyk/actions/node@master
  with:
    args: --severity-threshold=high --sarif-file-output=snyk.sarif

- name: Upload Snyk results
  uses: github/codeql-action/upload-sarif@v3
  if: always() && hashFiles('snyk.sarif') != ''
  with:
    sarif_file: snyk.sarif

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.