If HDF CodeDesc is empty, use Desc as Message

[candrews]

Sometimes, the HDF CodeDesc is empty. Currently, that results in the SARIF Message being set to "." which isn't good.

To fix that issue, if CodeDesc is empty, use the Desc.

I've reported one case where the HDF code_desc is set to the empty string at mitre/saf#1163

[michaelcfanning]

ok! this makes sense as a mitigation, particularly as you have done the due diligence of pursuing an upstream solution to the root problem. :)

if you will create a branch off main with your change and update the release note with an appropriate summary of the goodness, we will approve and merge.

thanks for the contribution!

[candrews]

ok! this makes sense as a mitigation, particularly as you have done the due diligence of pursuing an upstream solution to the root problem. :)

Fantastic! That's my sentiment precisely :)

if you will create a branch off main with your change and update the release note with an appropriate summary of the goodness, we will approve and merge.

I've submitted a new PR as you described: #2635

thanks for the contribution!

You're welcome!