Fix SARIF workflows for dependabot

[nihaals]

Currently the first commit in a dependabot PR triggers both the push and pull_request workflow instead of only the pull_request workflow. It works as expected when the PR is rebased (github.actor is likely something unexpected for the PR creation)

[nihaals]

This might just be #101 for some reason was created using the wrong commit, will require another dependabot PR to be created to test