Improve output for SARIF to make the recommendation and reason clear

[BernieWhite]

SARIF output is pulled into downstream tools such as GHAS, when issues are raised anybody reading the details needs to have a clear picture of was it wrong and what steps can be done to fix it.

For example in the following, it is not clear on the next steps or cause of the issue.

This is the output from assert that provides more specific information to the issue.