Introduce the “Assistant” domain + provide a simple support for vulnerability descriptions

[de-jcup]

Situation

We have situations when users are a little bit lost when they got only the CWE-Id and the generic mitre website description for a finding.

Wanted

As a user I want to be able to call an assistant at SecHub side which describes me a finding in a report in a human readable form.

Solution

Steps to do

• We introduce a new domain "assistant" inside SecHub server
  (Reason for new domain: Could be in future an own deployment unit)
• Create a concept documentation
• Create CRUD usecases for administrators (GET for project users)
• Provide database storage of description based for CWE and programming languages
• GET call resolves internal information for report finding and provides a description. If description is not available, a fallback message will be returned
• Integration test