fix(ci): scan-and-report — dispatch payload via file, not argv

fix(ci): scan-and-report — dispatch payload via file, not argv #549