Upload code scanning results to correct ref when releasing

Author: alcaeus

Diff for: .github/workflows/static-analysis.yml

@@ -29,6 +29,11 @@ jobs:
         with:
           ref: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || github.ref }}
 
+      - name: "Get SHA hash of checked out ref"
+        if: ${{ github.event_name == 'workflow_dispatch' }}
+        run: |
+          echo CHECKED_OUT_SHA=$(git rev-parse HEAD) >> $GITHUB_ENV
+
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
         with:
@@ -64,6 +69,8 @@ jobs:
         uses: "github/codeql-action/upload-sarif@v3"
         with:
           sarif_file: phpstan.sarif
+          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || github.ref }}
+          sha: ${{ github.event_name == 'workflow_dispatch' && env.CHECKED_OUT_SHA || github.sha }}
 
       - name: Save cache PHPStan results
         id: phpstan-cache-save