make source path relative for FlawFinder

sast-fuzz/static_analysis/sast/src/sfa/analysis/tool_runner.py

@@ -207,7 +207,14 @@ def _sanity_checks(self, string: str) -> None:
         default_sarif_checks(string)
 
     def _format(self, string: str) -> SASTFlags:
-        return convert_sarif(string)
+        flags = SASTFlags()
+
+        # convert absolute paths to relative ones
+        for flag in convert_sarif(string):
+            file = str(Path(flag.file).relative_to(self._subject_dir))
+            flags.add(SASTFlag(flag.tool, file, flag.line, flag.vuln))
+
+        return flags
 
 
 class SemgrepRunner(SASTToolRunner):