- for normal scanners, the vendor will be `GitLab`
- for custom scnners, the vendor will a custom string
- if no scanner exists, the report type should still show
- add tests