feat: Add pom.xml support for sonarype SAST

[laurentsimon]

See #2085

/cc @edwardsph

[codecov]

Codecov Report

Merging #2114 (6bbdf8f) into main (7de9713) will increase coverage by 0.30%.
The diff coverage is 71.42%.

@@            Coverage Diff             @@
##             main    #2114      +/-   ##
==========================================
+ Coverage   42.44%   42.75%   +0.30%     
==========================================
  Files          93       93              
  Lines        7598     7681      +83     
==========================================
+ Hits         3225     3284      +59     
- Misses       4123     4141      +18     
- Partials      250      256       +6     

[github-actions]

Integration tests success for
[d822c87]
(https://github.com/ossf/scorecard/actions/runs/2777773098)

[github-actions]

Integration tests success for
[3fb7329]
(https://github.com/ossf/scorecard/actions/runs/2777777946)

[azeemshaikh38]

LGTM with comments.

[github-actions]

Integration tests success for
[d9dd32f]
(https://github.com/ossf/scorecard/actions/runs/2791948702)

[github-actions]

Integration tests success for
[6bbdf8f]
(https://github.com/ossf/scorecard/actions/runs/2791952350)

[edwardsph]

Thanks for the quick change - looking forward to testing in the next release