You can upload SARIF files generated outside {% data variables.product.prodname_dotcom %} and see {% data variables.product.prodname_code_scanning %} alerts from third-party tools in your repository.