Once AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3297 is fixed and we update SBRP to reference a new release of IdentityModel with that fix, the changes for the global CodeQL suppression should be reverted: #1343