feat(sca): ignore package.json file when yarn.lock exists

[ayajbara]

Description

currently if we have yarn.lock file and package.json, we build a DT for yarn.lock and scan package.json.

Fixes # (issue)

New/Edited policies (Delete if not relevant)

Description

Include a description of what makes it a violation and any relevant external links.

Fix

How does someone fix the issue in code and/or in runtime?

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my feature, policy, or fix is effective and works
• New and existing tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules

[itai1357]

this bug causes me to think, maybe we need to get the scannable files from the DT-setup and use API call for getting the scanned file, for avoiding sure errors in the future