Ignore suppressed issues in sarif reports

[The-Jonsey]

Ignore suppressions in SARIF reports, as them being suppressed should exclude them from the violations, and related quality gates in the warnings ng plugin

Testing done

Unit tests were updated and was run against a jenkins instance passing in a sarif file with suppressions, which were ignored correctly

Submitter checklist

• Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
• Ensure that the pull request title represents the desired changelog entry
• Please describe what you did
• Link to relevant issues in GitHub or Jira
• Link to relevant pull requests, esp. upstream and downstream changes
• Ensure you have provided tests - that demonstrates feature works or fixes the issue

[KalleOlaviNiemitalo]

Upstream change tomasbjerre/violations-lib#156.

[The-Jonsey]

The check failures all seem to be either unrelated test timeouts or dependency-check timing out repeatedly, not sure if there's anything that needs doing about that

[uhafner]

SImplify with getOrDefault("suppressed", "false")

[The-Jonsey]

Fair point! updated to match

[uhafner]

The check failures all seem to be either unrelated test timeouts or dependency-check timing out repeatedly, not sure if there's anything that needs doing about that

Thanks for noting, I forgot to remove the invocation from the pom.xml. This part of the build is now configured in a profile.

[uhafner]

I think I fixed the timeout problems now, can you please merge with main?