Wrong severity mapping for native semgrep JSON parser

[Gby56]

django-DefectDojo/dojo/tools/semgrep/parser.py

Line 67 in 612a0f6

return "Low"

I think this is really wrong, WARNING level should be the same as the SARIF level https://docs.oasis-open.org/sarif/sarif/v2.0/csprd02/sarif-v2.0-csprd02.html#_Toc10127839
And this should be Medium in my opinion... or High, and ERROR should be Critical, this is all very weird to me
@damiencarol let me know what you think ? I haven't tried to ingest SARIF yet but I think it would reflect issues better

[coheigea]

IMO we should make the following changes:

• Change SARIF "error" mapping to "High" from "Critical"
• Change Semgrep "WARNING" mapping to "Medium" from "Low".

That would ensure both Semgrep/Sarif map High/Medium to the same severity values in DefectDojo

[coheigea]

PR submitted: #6508

[coheigea]

@Gby56 The issue can be closed