Resolve "No cve field in SAST results but it's needed by MR widget"
What does this MR do?
Add a cve
field to vulnerability issues listed by SAST.
Why was this MR needed?
So that we can perform issue matching and liste new/resolved issues.
Does this MR meet the acceptance criteria?
-
Changelog entry added, if necessary Documentation created/updated-
Tests added for this feature/bug
What are the relevant issue numbers?
Closes #73