Continuous Container Scanning attempts to insert findings with empty name

Summary

When scanning for the Trivy DB advisory CVE-2024-2886, the container scanning finding builder creates a finding with an empty name. This causes the ingestion to fail.

Steps to reproduce

1. Attempt to run a CVS scan for the advisory with advisory_xid: CVE-2024-2886 and source_xid: trivy-db.
2. Notice that the name attribute is empty in the resulting finding / finding maps.

Example Project

What is the current bug behavior?

The finding name is empty and a vulnerability is not created.

What is the expected correct behavior?

The finding name attribute should not be empty.

Relevant logs and/or screenshots

• GITLABCOM-2H0X (internal link)

Implementation plan

1. Update the container scanning and dependency scanning finding builders to have a fallback title in case one is not provided.
2. Add a spec that verifies that this corner case is handled.

/cc @thiagocsf @johncrowley