fix: use correct path seperator in SARIF output when on Windows

internal/output/sarif.go

@@ -25,6 +25,7 @@ type HelpTemplateData struct {
 	AliasedVulns          []VulnDescription
 	HasFixedVersion       bool
 	FixedVersionTable     string
+	PathSeperator         string
 }
 
 type FixedPkgTableData struct {
@@ -81,7 +82,7 @@ See the format and more options in our documentation here: https://google.github
 Add or append these values to the following config files to ignore this vulnerability:
 
 {{range .AffectedPackagePaths -}}
-""{{.}}/osv-scanner.toml""
+""{{.}}{{$.PathSeperator}}osv-scanner.toml""
 
 """"""
 [[IgnoredVulns]]
@@ -213,6 +214,7 @@ func createSARIFHelpText(gv *groupedSARIFFinding) string {
 		HasFixedVersion:       hasFixedVersion,
 		FixedVersionTable:     createSARIFFixedPkgTable(fixedPkgTableData).RenderMarkdown(),
 		AffectedPackagePaths:  affectedPackagePaths,
+		PathSeperator:         string(filepath.Separator),
 	})
 
 	if err != nil {

internal/output/sarif_internal_test.go

@@ -17,13 +17,13 @@ func Test_createSARIFHelpText(t *testing.T) {
 		{
 			args: testutility.LoadJSONFixture[groupedSARIFFinding](t, "fixtures/vuln-grouped.json"),
 			want: testutility.NewSnapshot().WithWindowsReplacements(map[string]string{
-				"\\path\\to\\sub-rust-project/osv-scanner.toml": "/path/to/sub-rust-project/osv-scanner.toml",
+				"\\path\\to\\sub-rust-project\\osv-scanner.toml": "/path/to/sub-rust-project/osv-scanner.toml",
 			}),
 		},
 		{
 			args: testutility.LoadJSONFixture[groupedSARIFFinding](t, "fixtures/commit-grouped.json"),
 			want: testutility.NewSnapshot().WithWindowsReplacements(map[string]string{
-				"<rootdir>\\Documents\\Project\\engine/osv-scanner.toml": "<rootdir>/Documents/Project/engine/osv-scanner.toml",
+				"<rootdir>\\Documents\\Project\\engine\\osv-scanner.toml": "<rootdir>/Documents/Project/engine/osv-scanner.toml",
 			}),
 		},
 	}