Add OWASP dependency check issue parser

[sirius94]

• Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
• Ensure that the pull request title represents the desired changelog entry
• Please describe what you did
• Link to relevant issues in GitHub or Jira
• Link to relevant pull requests, esp. upstream and downstream changes
• Ensure you have provided tests - that demonstrates feature works or fixes the issue

This PR is a continuation of jenkinsci/analysis-model#708 and depends on #1115

[KalleOlaviNiemitalo]

I assume this does not have the same SECURITY-2488 XXE vulnerability as the OWASP Dependency-Check plugin.

[uhafner]

Did you check if this ID is not already used by the original OwaspDependencyCheck plugin?

[KalleOlaviNiemitalo]

The OWASP Dependency-Check plugin has:

• @Symbol("dependency-check")
• @Symbol("dependencyCheckPublisher")
• @Symbol({"dependencyCheck", "dependencycheck"})

Pipeline Step Reference doesn't list any others for that plugin, either.

[uhafner]

I assume this does not have the same SECURITY-2488 XXE vulnerability as the OWASP Dependency-Check plugin.

Actually the parser uses JSON. (And all parsers in the warnings plugin correctly use a safe parser: https://github.com/jenkinsci/analysis-model/blob/master/src/main/java/edu/hm/hafner/analysis/SecureXmlParserFactory.java))

[codecov]

Codecov Report

Merging #1117 (1d616f0) into master (15e65c4) will increase coverage by 0.01%.
The diff coverage is 100.00%.

@@             Coverage Diff              @@
##             master    #1117      +/-   ##
============================================
+ Coverage     79.72%   79.74%   +0.01%     
- Complexity     1476     1477       +1     
============================================
  Files           243      244       +1     
  Lines          5372     5376       +4     
  Branches        420      420              
============================================
+ Hits           4283     4287       +4     
  Misses          933      933              
  Partials        156      156              

Impacted Files	Coverage Δ
...lugins/analysis/warnings/OwaspDependencyCheck.java	100.00% <100.00%> (ø)

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 15e65c4...1d616f0. Read the comment docs.

[uhafner]

Do not use force push after we made a review. Otherwise it is hard to see what changed since the review.