Add tests to cover empty vulnerability states
What does this MR do and why?
This MR adds tests for vulnerability_states: []
in policies to confirm that it behaves like vulnerability_states: ['new_dismissed', 'new_needs_triage']
Related Slack thread (internal)
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Related to #437105 (closed)
Edited by Martin Čavoj