I'm very happy to see SARIF was added to bandit recently, thank you :)

I'm not sure why but the docs at https://bandit.readthedocs.io/en/latest/formatters/sarif.html are not showing the content for the SARIF formatter though it looks to me like they were defined in https://github.com/PyCQA/bandit/blob/main/bandit/formatters/sarif.py