Can you raise a feature request on GitHub with a sample file showing components? Currently the SARIF parser doesn't parse components. The govulncheck JSON parser does.
Govulncheck json parser does not show the severity for some reason but the sarif has severity so defect dojo categorises based on the severity. But using govulncheck Json parser all the vulnerabilities will be set to info severity.