refactor: include/exclude dev deps in analyzers

[DmitriyLewen]

Description

Move dev(test) dependencies inclusion/exclusion in analyzers.
See #7476 for more details.

Related issues

• Close enhancement(report): include/exclude dev deps in analyzers #7476

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[coheigea]

@DmitriyLewen 2d97700 caused a major regression for us, in that it appears --include-dev-deps was never wired through, and maven test dependencies are therefore included by default. Will it be fixed in this PR? IMO it's worthy of a hotfix as we had to downgrade to stop all of our builds producing hundreds of test CVEs

[DmitriyLewen]

Hello @coheigea
yeah, this PR contains fix for that (dba9f9f)

Can you test these changes in your project?

[coheigea]

Thanks @DmitriyLewen , with the PR it doesn't scan test dependencies by default any more.

[DmitriyLewen]

I was thinking about moving this check to the Required function.
But it might not be entirely obvious

[github-actions]

This PR is stale because it has been labeled with inactivity.