Code scanning seems to require the complete picture of the project. E.g. if a violation is not reported anymore, the code scanning alerts are getting closed.

This should be done:

• Add documentation about this behavior to the parameter analyzeModifiedFilesOnly
• Update the example for using update-sarif by setting analyzeModifiedFilesOnly=false
• Update starter workflow https://github.com/actions/starter-workflows/blob/main/code-scanning/pmd.yml to also include this parameter