WIP: fix location description for SAST

This description property is not placed correctly and overrides the description of the vulnerability object.

If this is correct, we need to fix other reports too (hence the WIP state).