EPSS Data not Being Imported for Anchore Grype Scan

[farsheedify]

Bug description
Based on this PR #12639 we expect to see the EPSS field for the findings of anchore grype. But they are shown as N.A.

Steps to reproduce
Steps to reproduce the behavior:

1. Import the sample JSON to Defectdojo Demo (dojo (2).json)
2. View the Findings
3. You will see N.A. for EPSS field

Expected behavior
EPSS Score being imported and shown in the EPSS field for each finding.

dojo (2).json

Screenshots

[valentijnscholten]

Confirmed, could be caused by the display_tag not being able to format the EPSS value.

[valentijnscholten]

The problem is that the vulnerability id is a GHSA identifier for which there is no EPSS data. The parser did an attempt to get the EPSS data from the related vulnerabilities in the report, but didn't succeed for this scenario.
PR #12825 fixes this for this specific sample report. If we get more sample reports we can assess if a larger change in the parser is needed. Currently it only looks at the first related vulnerability.