common: take important flag from scanners into account

Depends on: csutils/csdiff#143
Related: https://issues.redhat.com/browse/OSH-289
Closes: csutils#125

make-srpm.sh

@@ -124,7 +124,7 @@ Tool for plugging static analyzers into the build process, free of mock.
 
 %package -n csmock-common
 Summary: Core of csmock (a mock wrapper for Static Analysis tools)
-Requires: csdiff > 3.0.3
+Requires: csdiff > 3.0.4
 Requires: csgcca
 Requires: cswrap
 Requires: mock

py/common/results.py

@@ -312,6 +312,9 @@ def finalize_results(js_file, results, props):
             cmd += " | csdiff <(csgrep '%s' --mode=json --drop-scan-props --invert-regex --checker '%s' %s) -" \
                     % (js_file, chk_re, csgrep_args)
 
+        # finally take all defects that were tagged important by the scanner already
+        cmd += f" | csgrep --mode=json <(csgrep --mode=json --imp-level=1 '{js_file}') -"
+
         # write the result into *-imp.js
         imp_js_file = re.sub("\\.js", "-imp.js", js_file)
         cmd += " > '%s'" % imp_js_file