Add Sarif file format support

[jason-edstrom]

Is your feature request related to a problem? Please describe.
I love the information that this provides, but I would like to be able to report the information in the GitHub Security tab. That upload requires a Sarif file format.

Describe the solution you'd like
I would like the plugin to generate a sarif file for upload.

Describe alternatives you've considered
Currently using the junit xml file to provide some traceability
I would be willing to use the sonarqube plugin, but I'm using sonarcloud currently.

Additional context

[jeremylong]

Initial implementation via #3083. I'm sure we could do better. One thing this does not do is include the relatedDependencies section.