Because we're no longer failing the entire workflow at this stage, we'd like to provide a better error when we upload SARIF if that API call returns 403/404. So perhaps we can simply do core.warning(e.message) in this file (and below, in the 404 case, and move the GENERIC_403_MSG and GENERIC_404_MSG to catch these response codes after this call:

?