trivy-iac-scan: Fix bug with empty URI (#155)

* trivy-iac-scan: Fix bug with empty URI

* Update action.yml

* Update action.yml

trivy-iac-scan/action.yml

@@ -81,9 +81,15 @@ runs:
           --ignorefile '${{ inputs.trivyignore }}' \
           ${{ inputs.skip-dirs != '' && format('--skip-dirs {0}', inputs.skip-dirs) || '' }}
 
+    - name: Modify Trivy report
+      shell: bash
+      run: |
+        # Run jq to modify the Trivy report
+        cat ${{ env.TRIVY_SARIF }} |jq '.runs[0].results[] |= (select(.locations[].physicalLocation.artifactLocation.uri=="").locations[].physicalLocation.artifactLocation.uri=".")'>trivy2.sarif
+
     - name: Upload Trivy report to GitHub Security tab
       if: ${{ inputs.upload-report == 'true' }}
       uses: github/codeql-action/upload-sarif@v3
       with:
-        sarif_file: ${{ env.TRIVY_SARIF }}
+        sarif_file: trivy2.sarif
         category: 'Trivy'