add SARIF support (v2) for PHP linters

[llaville]

Fixes #3693

Proposed Changes

Use new Composer package bartlett/sarif-php-converters, even if no stable release exists.

Tip

Use the Composer constraint with branch alias 1.0.x-dev

Readiness Checklist

Author/Contributor

• Add entry to the CHANGELOG listing the change and linking to the corresponding issue (if appropriate)
• If documentation is needed for this change, has that been included in this pull request

Reviewing Maintainer

• Label as breaking if this is a large fundamental change
• Label as either automation, bug, documentation, enhancement, infrastructure, or performance

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ API	spectral	2		0	3.19s
✅ BASH	bash-exec	5		0	0.07s
✅ BASH	shellcheck	5		0	0.12s
✅ BASH	shfmt	5	0	0	0.61s
✅ COPYPASTE	jscpd	yes		no	3.71s
✅ DOCKERFILE	hadolint	129		0	17.66s
✅ JSON	jsonlint	18		0	0.21s
✅ JSON	v8r	20		0	28.16s
⚠️ MARKDOWN	markdownlint	266	0	272	35.73s
✅ MARKDOWN	markdown-table-formatter	266	0	0	137.21s
✅ OPENAPI	spectral	2		0	2.86s
⚠️ PYTHON	bandit	212		64	4.0s
✅ PYTHON	black	212	0	0	5.36s
✅ PYTHON	flake8	212		0	2.63s
✅ PYTHON	isort	212	0	0	1.37s
✅ PYTHON	mypy	212		0	18.65s
✅ PYTHON	pylint	212		0	16.72s
✅ PYTHON	ruff	212	0	0	0.62s
✅ REPOSITORY	checkov	yes		no	44.19s
✅ REPOSITORY	git_diff	yes		no	0.59s
⚠️ REPOSITORY	grype	yes		1	22.63s
✅ REPOSITORY	secretlint	yes		no	12.69s
✅ REPOSITORY	trivy	yes		no	21.77s
✅ REPOSITORY	trivy-sbom	yes		no	1.29s
⚠️ REPOSITORY	trufflehog	yes		1	15.53s
✅ SPELL	cspell	694		0	26.53s
⚠️ SPELL	lychee	347		1	7.37s
✅ XML	xmllint	3	0	0	0.58s
✅ YAML	prettier	161	0	0	6.09s
✅ YAML	v8r	102		0	187.9s
✅ YAML	yamllint	162		0	2.26s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by

[llaville]

Ready for review and feedback

[nvuillam]

You are our PHP guru, you have my full trust :)

And the test cases seem to agree :)