Allow using a hash to restore SARIF results from a cache and reuse them.

node_modules/fs/package.json

@@ -1,20 +1,48 @@
 {
-  "name": "fs",
-  "version": "0.0.1-security",
-  "description": "",
-  "main": "index.js",
-  "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+  "_args": [
+    [
+      "fs@0.0.1-security",
+      "/home/chris/src/github.com/github/codeql-action"
+    ]
+  ],
+  "_from": "fs@0.0.1-security",
+  "_id": "fs@0.0.1-security",
+  "_inBundle": false,
+  "_integrity": "sha1-invTcYa23d84E/I4WLV+yq9eQdQ=",
+  "_location": "/fs",
+  "_phantomChildren": {},
+  "_requested": {
+    "type": "version",
+    "registry": true,
+    "raw": "fs@0.0.1-security",
+    "name": "fs",
+    "escapedName": "fs",
+    "rawSpec": "0.0.1-security",
+    "saveSpec": null,
+    "fetchSpec": "0.0.1-security"
   },
+  "_requiredBy": [
+    "/"
+  ],
+  "_resolved": "https://registry.npmjs.org/fs/-/fs-0.0.1-security.tgz",
+  "_spec": "0.0.1-security",
+  "_where": "/home/chris/src/github.com/github/codeql-action",
+  "author": "",
+  "bugs": {
+    "url": "https://github.com/npm/security-holder/issues"
+  },
+  "description": "This package name is not currently in use, but was formerly occupied by another package. To avoid malicious use, npm is hanging on to the package name, but loosely, and we'll probably give it to you if you want it.",
+  "homepage": "https://github.com/npm/security-holder#readme",
+  "keywords": [],
+  "license": "ISC",
+  "main": "index.js",
+  "name": "fs",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/npm/security-holder.git"
   },
-  "keywords": [],
-  "author": "",
-  "license": "ISC",
-  "bugs": {
-    "url": "https://github.com/npm/security-holder/issues"
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
   },
-  "homepage": "https://github.com/npm/security-holder#readme"
-}
+  "version": "0.0.1-security"
+}