Renders report as a SARIF 2.1.0 log. toolVersion populates tool.driver.version when non-null; it is omitted otherwise (optional in SARIF, and null under dev/TestKit runs where no jar manifest is present).
tool.driver.version