Vulnerabilities will pull the `dismissed_by_id` from
`dismissal_feedback` if the value is not found for
the vulnerability.