allow to ignore vulnerabilities by sonatype id or cve id

[sseide]

this patch improves the ignore-id parameter to allow setting CVE ids too in addition to the Sonatype ID.
Furthermore the documentation is updated that "id" means the Sonatype id of a vulnerability.

As a lot of other scanners accept CVE ids for whitelisting (even other scanner using Sonatype OSSIndex for other languages) this functionality was added here too. The old implementation was misleading as it was not documented that the id to ignore is not the wildly used and everywhere (throughout the internet) documented CVE id but the proprietary Sonatype one. The default output of ossaudit was not showing the Sonatype ID too, only the CVE (within the title field - if available)

Thanks,
S. Seide

[illikainen]

Awesome! You're right that it makes sense to ignore by CVE in addition to the SonaType identifiers.

Thanks!

[sseide]

thanks - do you mind to create a new release with all the latest updates?