fix(sca): handling unknown severity

[itai1357]

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Fix

How does someone fix the issue in code and/or in runtime?
handling unknown severity

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my feature, policy, or fix is effective and works
• New and existing tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules