Switch SARIF report off jackson

[chao2zhang]

Size of detekt-report-sarif jar: 2.2MB -> 15KB

Noticeable change

I was not able to find a JSONSchema -> Kotlin data class annotated with Kotlinx-serialization tool that preserves the order.

• https://github.com/wuseal/JsonToKotlinClass - I tried by it is crashing for my JSON schema. See Crash when trying with SARIF JSON schema wuseal/JsonToKotlinClass#333
• https://quicktype.io/ This does allow unstandard propertyOrder but requires changing the JSON schema.

In the end, object JSON Schema should expect to have a unordered set of properties according to https://tools.ietf.org/html/draft-wright-json-schema-00#section-4.2, but as mentioned in #3045 (comment), it is still recommended to preserve order for streaming parsing consumers.

TODO

Port #3556

[codecov]

Codecov Report

Merging #3557 (f889fb7) into main (b72898b) will decrease coverage by 0.04%.
The diff coverage is 74.24%.

@@             Coverage Diff              @@
##               main    #3557      +/-   ##
============================================
- Coverage     78.04%   78.00%   -0.05%     
  Complexity     2837     2837              
============================================
  Files           467      467              
  Lines          9152     9135      -17     
  Branches       1742     1737       -5     
============================================
- Hits           7143     7126      -17     
  Misses         1067     1067              
  Partials        942      942              

Impacted Files	Coverage Δ	Complexity Δ
...n/io/github/detekt/report/sarif/RuleDescriptors.kt	28.57% <17.64%> (+8.57%)	0.00 <0.00> (ø)
...tlab/arturbosch/detekt/report/SarifReportMerger.kt	66.66% <60.00%> (-25.00%)	2.00 <1.00> (-1.00)
...in/kotlin/io/github/detekt/report/sarif/Results.kt	95.65% <95.65%> (ø)	0.00 <0.00> (?)
...io/github/detekt/report/sarif/SarifOutputReport.kt	90.62% <100.00%> (+0.14%)	5.00 <2.00> (+1.00)

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b72898b...f889fb7. Read the comment docs.

[cortinico]

I have little context on this part of the codebase, but the change looks sane to me 👍