SARIF output ignores exclude argument

[bmos]

Describe the bug

When using the SARIF output, results are shown for files that match the exclude argument

Reproduction steps

1. Install a module with a bunch of dependencies to a virtual environment at .venv
1. Install bandit[sarif]
1. Run `bandit --format sarif --exclude .venv/* --recursive .`
1. Examine results.sarif

Expected behavior

Results in sarif file respect the choices passed in using --exclude

Bandit version

1.8.3 (Default)

Python version

3.13 (Default)

Additional context

No response

[bmos]

I also had this issue when passing in .venv via pyproject.toml (with bandit[toml,sarif])

[tool.bandit]
exclude_dirs = [".venv/"]

[ericwb]

I don't think this is specific to SARIF format. Instead appears to be the same problem as noted in issue #975