Once https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/issues/3297 is fixed and we update SBRP to reference a new release of IdentityModel with that fix, the changes for the global CodeQL suppression should be reverted: https://github.com/dotnet/source-build-reference-packages/pull/1343