💄 Update Wazuh v4.8 (#13184)

* 💄 Update Wazuh v4.8

* ruff

* update

* update

* Update dojo/tools/wazuh/v4_8.py

Co-authored-by: Cody Maffucci <46459665+Maffooch@users.noreply.github.com>

---------

Co-authored-by: Cody Maffucci <46459665+Maffooch@users.noreply.github.com>

Author: manuel-sommer

dojo/tools/wazuh/v4_8.py

@@ -1,5 +1,3 @@
-import hashlib
-
 from dojo.models import Finding
 
 
@@ -11,29 +9,26 @@ def parse_findings(self, test, data):
             item = item_source.get("_source")
             vuln = item.get("vulnerability")
             cve = vuln.get("id")
+
+            # Construct a unique key for deduplication
+            dupe_key = f"{cve}-{item.get('agent', {}).get('id')}"
+
+            if dupe_key in dupes:
+                continue  # Skip if this finding has already been processed
+
             description = vuln.get("description")
             description += "\nAgent id:" + item.get("agent").get("id")
             description += "\nAgent name:" + item.get("agent").get("name")
             severity = vuln.get("severity")
             cvssv3_score = vuln.get("score").get("base")
             publish_date = vuln.get("published_at").split("T")[0]
-            agent_id = item.get("agent").get("id")
             detection_time = vuln.get("detected_at").split("T")[0]
-
             references = vuln.get("reference")
 
             title = (
                 cve + " affects (version: " + item.get("package").get("version") + ")"
             )
 
-            dupe_key = title + agent_id + description
-            dupe_key = hashlib.sha256(dupe_key.encode("utf-8")).hexdigest()
-
-            if dupe_key in dupes:
-                find = dupes[dupe_key]
-            else:
-                dupes[dupe_key] = True
-
             find = Finding(
                 title=title,
                 test=test,
@@ -48,6 +43,7 @@ def parse_findings(self, test, data):
                 unique_id_from_tool=dupe_key,
                 date=detection_time,
             )
-            find.unsaved_vulnerability_ids = cve
+            find.unsaved_vulnerability_ids = [cve]
             dupes[dupe_key] = find
+
         return list(dupes.values())