fix: root file path of vulnerable component is missing

[b31ngd3v]

when scanning a file, if a vulnerability is found it should provide the path of the main file, not the extracted temp file.

before:

after:

[codecov-commenter]

Codecov Report

Merging #3088 (75e8d40) into main (a0b6dfd) will increase coverage by 0.25%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##             main    #3088      +/-   ##
==========================================
+ Coverage   81.92%   82.18%   +0.25%     
==========================================
  Files         714      714              
  Lines       10983    10984       +1     
  Branches     1476     1477       +1     
==========================================
+ Hits         8998     9027      +29     
+ Misses       1599     1573      -26     
+ Partials      386      384       -2     

Flag	Coverage Δ
longtests	76.15% <100.00%> (+<0.01%)	⬆️
win-longtests	79.95% <100.00%> (+1.69%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
cve_bin_tool/version_scanner.py	85.31% <100.00%> (+0.08%)	⬆️

... and 7 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[terriko]

This looks like a solid and useful improvement, thanks!