TT-16670: use CVE ids in scan report

Author: olamilekan000

.github/workflows/osv-path-scan.yml

@@ -54,7 +54,7 @@ jobs:
           # Count vulnerabilities by severity
           CRITICAL=$(jq '[.results[].packages[]?.vulnerabilities[]? | select(.database_specific.severity == "CRITICAL")] | length' osv-results.json || echo 0)
           HIGH=$(jq '[.results[].packages[]?.vulnerabilities[]? | select(.database_specific.severity == "HIGH")] | length' osv-results.json || echo 0)
-          MEDIUM=$(jq '[.results[].packages[]?.vulnerabilities[]? | select(.database_specific.severity == "MEDIUM")] | length' osv-results.json || echo 0)
+          MEDIUM=$(jq '[.results[].packages[]?.vulnerabilities[]? | select(.database_specific.severity == "MODERATE")] | length' osv-results.json || echo 0)
           LOW=$(jq '[.results[].packages[]?.vulnerabilities[]? | select(.database_specific.severity == "LOW")] | length' osv-results.json || echo 0)
 
           # Helper function for report lines
@@ -65,7 +65,7 @@ jobs:
               .packages[]? as $pkg | 
               ($pkg.vulnerabilities // [])[]? |
               select(.database_specific.severity == $sev) |
-              "- (\(.id)) (score: \(.database_specific.cvss.score // .database_specific.cvss3_score // 0), affects: \($pkg.package.name)@\($pkg.package.version), fixed: \([.affected[]?.ranges[]?.events[]?.fixed | select(. != null)] | unique | join(",") // "unknown")): \(.summary // .details | split("\n")[0] | sub("^[ ]+"; ""))"
+              "- (" + ((.aliases // []) | map(select(startswith("CVE-")))[0] // .id) + ") (score: " + (.database_specific.max_severity // .database_specific.cvss.score // .database_specific.cvss3_score // 0 | tostring) + ", affects: \($pkg.package.name)@\($pkg.package.version), fixed: \([.affected[]?.ranges[]?.events[]?.fixed | select(. != null)] | unique | join(",") // "unknown")): \(.summary // .details | split("\n")[0] | sub("^[ ]+"; ""))"
             ' osv-results.json | sort -u
           }
 
@@ -86,7 +86,7 @@ jobs:
             generate_lines HIGH
             echo ""
             echo "## Medium CVEs"
-            generate_lines MEDIUM
+            generate_lines MODERATE
             echo ""
             echo "## Low CVEs"
             generate_lines LOW