Zvonimir

As of [v1.1.1](https://github.com/golang/vuln/releases/tag/v1.1.1), govulncheck supports SARIF output via `-format sarif` flag option. This might be a better option for govulncheck integration compared to streaming JSON.

govulncheck: adjust support to handle relative paths

1

As of v1.1.0, [govulncheck JSON paths are relative](https://github.com/golang/vuln/releases/tag/v1.1.0) to their enclosing module, rather than being absolute as earlier. This change was done to increase portability and to not leak information...

Otherwise, users see things on their screen unexpectedly.