Xray SCA scan - always show results with location on Sarif output

[attiasas]

• All tests passed. If this feature is not already covered by the tests, I added new tests.
• All static analysis checks passed.
• This pull request is on the dev branch.
• I used gofmt for formatting the code before submitting the pull request.

---

For all Xray SCA scans (audit, docker scan...) with Sarif format output:

If location can't be determined show location with default value: Package Descriptor

• Fixes Github integration validation

Before:

{
          "ruleId": "CVE-2023-5363_debian:bookworm:openssl_3.0.11-1~deb12u1",
          "ruleIndex": 43,
          "level": "none",
          "message": {
            "text": "[CVE-2023-5363] sha256__6cd9f01fb9e511a9e611c6592d62412c0fead4b2b09dc3de7fbf6b50a8df0eed.tar"
          }
}

After:

{
          "ruleId": "CVE-2023-5363_debian:bookworm:openssl_3.0.11-1~deb12u1",
          "ruleIndex": 43,
          "level": "none",
          "message": {
            "text": "[CVE-2023-5363] sha256__6cd9f01fb9e511a9e611c6592d62412c0fead4b2b09dc3de7fbf6b50a8df0eed.tar"
          },
         "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "Package Descriptor"
                }
              }
            }
          ]
}

[yahavi]

Looks good! Well done @attiasas!