Fix bug in ruleset package preventing disablements from being enforced

See merge request gitlab-org/security-products/analyzers/common!136