Add `scan.analyzer` field to the security report (!28)