Add coverage for replacing SAST analyzers

What does this MR do and why?

The basis of this MR came from work in Draft: feat: Reorder Security finding identifie... (!82548 - closed)

This adds more thorough coverage in preparation of upcoming changes to replace SAST analyzers.

Make secondary identifiers match for finding (!82538 - merged) will build upon the specs in this MR.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.