PR Checks: use semantic versioning for create-github-app-token
#5999
__upload-ref-sha-input.yml
on: pull_request
Matrix: Upload-sarif: 'ref' and 'sha' from inputs