dependency checkers: provide better defaults for static/dynamic finding flags

Author: valentijnscholten

dojo/tools/dependency_track/parser.py

@@ -195,7 +195,10 @@ def _convert_dependency_track_finding_to_dojo_finding(self, dependency_track_fin
             description=vulnerability_description,
             severity=vulnerability_severity,
             numerical_severity=Finding.get_numerical_severity(vulnerability_severity),
-            false_p=is_false_positive)
+            false_p=is_false_positive,
+            static_finding=True,
+            dynamic_finding=False)
+
 
     def __init__(self, file, test):
         # Start with an empty list of findings

dojo/tools/npm_audit/parser.py

@@ -71,6 +71,8 @@ def get_item(item_node, test):
                       duplicate=False,
                       out_of_scope=False,
                       mitigated=None,
-                      impact="No impact provided")
+                      impact="No impact provided",
+                      static_finding=True,
+                      dynamic_finding=False)
 
     return finding

dojo/tools/php_symfony_security_check/parser.py

@@ -62,6 +62,8 @@ def get_item(dependency_name, dependency_version, advisory, test):
                       duplicate=False,
                       out_of_scope=False,
                       mitigated=None,
-                      impact="No impact provided")
+                      impact="No impact provided",
+                      static_finding=True,
+                      dynamic_finding=False)
 
     return finding