Finding uses latest sha, not default branch

ee/app/views/projects/security/vulnerabilities/show.html.haml

@@ -31,11 +31,12 @@
             %li
               - link_text = _("%{file}") % { file: location['file'] }
               - offset = _('')
+              - branch = _("%{branch}") % { branch: @vulnerability.finding.pipelines&.last&.sha || @vulnerability.project.default_branch }
               - if location['start_line']
                 - link_text = _("%{link_text}:%{line}") % { link_text: link_text, line: location['start_line'] }
                 - offset = _("#L%{start_line}") % { start_line: location['start_line'] }
               = _('File:')
-              %a{ href: project_blob_path(@project, tree_join(@vulnerability.project.default_branch, location['file'])) + offset,
+              %a{ href: project_blob_path(@project, tree_join(branch, location['file'])) + offset,
                 target: '_blank', rel: 'noopener noreferrer' }= link_text
             - if location['class']
               %li= _("Class: %{className}") % { className: location['class'] }

locale/gitlab.pot

@@ -228,6 +228,9 @@ msgstr ""
 msgid "%{authorsName}'s thread"
 msgstr ""
 
+msgid "%{branch}"
+msgstr ""
+
 msgid "%{commit_author_link} authored %{commit_timeago}"
 msgstr ""