It is possible to have more than one finding with the same project
fingerprint for a report artifact which breaks the logic of marking
findings as deduplicated based on project fingerprint values.

For this reason, we need to mark findings as deduplicated based on
their position within their reports.