fix(ci): scan-and-report — dispatch payload via file, not argv (#155)

fix(ci): scan-and-report — dispatch payload via file, not argv (#155) #488