feat(rpc): add CWE-ID

[knqyf263]

Related

#561

Note

We can fix integration tests after this PR.

[codecov]

Codecov Report

Merging #614 into master will decrease coverage by 0.00%.
The diff coverage is 50.00%.

@@            Coverage Diff             @@
##           master     #614      +/-   ##
==========================================
- Coverage   56.15%   56.14%   -0.01%     
==========================================
  Files          44       44              
  Lines        2137     2139       +2     
==========================================
+ Hits         1200     1201       +1     
- Misses        811      812       +1     
  Partials      126      126              

Impacted Files	Coverage Δ
pkg/rpc/convert.go	38.70% <50.00%> (+0.09%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ed8607b...3c978f4. Read the comment docs.

[simar7]

This is great for a start but I think we will still need the deprecated VendorVectors to have parity with docker_engine mode.

You can see it here:

client_server: https://github.com/aquasecurity/trivy/blob/52cc0dd353aebaf34bc38a30b904e56e43530771/integration/testdata/client_server/alpine-310-medium-high.json.golden

docker_engine:
https://github.com/aquasecurity/trivy/blob/52cc0dd353aebaf34bc38a30b904e56e43530771/integration/testdata/docker_engine/alpine-310-medium-high.json.golden

[knqyf263]

I see. VendorVectors has nothing to do with cwe-id, so can we merge this PR once?

[simar7]

Yeah let's merge this but we still need another PR to get parity.