DAST is not correctly reporting discovered_at time

Problem to solve

The discovered_at field in the gl-dast-report.json is adding in the epoch time instead of a proper discovery timestamp. See https://gitlab-org.gitlab.io/-/security-products/dast-benchmark/-/jobs/1536415462/artifacts/dvwa-full-ajax.json as an example (search for discovered_at to see the "discovered_at": "1970-01-01T00:00:00.000", as an example.

Proposal

Ensure reports are returning valid discovered_at timestamps.

Intended users

What does success look like, and how can we measure that?

End to end tests verify discovered_at is never the epoch value.

What is the type of buyer?

Gold/Ultimate

Links / references