Use DEDUPE_ALGO_HASH_CODE

Author: mfyll

dojo/settings/settings.dist.py

@@ -1659,7 +1659,7 @@ def saml2_attrib_map_format(din):
     "Cyberwatch scan (Galeax)": DEDUPE_ALGO_HASH_CODE,
     "OpenVAS Parser v2": DEDUPE_ALGO_HASH_CODE,
     "Snyk Issue API Scan": DEDUPE_ALGO_HASH_CODE,
-    "OpenReports": DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL_OR_HASH_CODE,
+    "OpenReports": DEDUPE_ALGO_HASH_CODE,
 }
 
 # Override the hardcoded settings here via the env var

dojo/tools/openreports/parser.py

@@ -268,8 +268,7 @@ def _create_finding_from_result(self, test, result, service_name, report_name, r
             if policy.startswith("CVE-"):
                 finding.unsaved_vulnerability_ids = [policy]
 
-            # Set vuln_id_from_tool to the policy field for deduplication
-            # This allows using DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL_OR_HASH_CODE
+            # Set vuln_id_from_tool to policy field for display
             finding.vuln_id_from_tool = policy
 
             return finding  # noqa: TRY300 - This is intentional