We use column number == 0 to mean "the whole line". As noted in: https://gcc.gnu.org/pipermail/gcc-patches/2023-November/635446.html SARIF requires column numbers to be >= 1 We should simply omit the attribute for such cases.
Should be fixed by commit r15-1540-g9f4fdc3acebcf6b045edea1361570658da4bc0ab.