Parse grype report without description

[jwigert]

The element "description" is not always available for a "vulnerability" in the JSON generated by Grype. This leads to the error JSONObject["description"] not found.

Example to reproduce (using Grype version 0.71.0 with the vulnerability db built 2023-10-18 01:27:01 +0000 UTC):

docker pull gitea/gitea:1.20.4
grype -o json <image_id> > grype-report-wo-description.json

To resolve this, I implemented a change to the GrypeParser, where the default value "Unknown" is set if "description" is missing.

Testing done

I added a new test GrypeParserWoDescriptionTest.java to verify that a "vulnerability" without "description" can be parsed.

I ran mvn verify, and all tests are green.

Submitter checklist

Beta Give feedback

1. Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
2. Ensure that the pull request title represents the desired changelog entry
3. Please describe what you did
4. Link to relevant issues in GitHub or Jira
5. Link to relevant pull requests, esp. upstream and downstream changes
6. Ensure you have provided tests - that demonstrates feature works or fixes the issue

[uhafner]

Thanks for your PR. The code looks good, just the test should be moved...

[codecov]

Codecov Report

Merging #962 (a63caf7) into main (fe6bee7) will not change coverage.
Report is 1 commits behind head on main.
The diff coverage is 100.00%.

@@            Coverage Diff            @@
##               main     #962   +/-   ##
=========================================
  Coverage     93.07%   93.07%           
  Complexity     2371     2371           
=========================================
  Files           347      347           
  Lines          6588     6588           
  Branches        686      686           
=========================================
  Hits           6132     6132           
  Misses          256      256           
  Partials        200      200           

Files	Coverage Δ
...ava/edu/hm/hafner/analysis/parser/GrypeParser.java	95.45% <100.00%> (ø)

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[uhafner]

Thanks!