fix(secfixes-check): pass the split string not the full line

also make a violation for having a security identifier we don't know

secfixes-check

@@ -271,9 +271,11 @@ local function main(arg)
 					---
 					for splitv in string.gmatch(v, "[^ ]+") do
 						if splitv:match("^CVE") then
-							checkCVE(v, k)
+							checkCVE(splitv, k)
 						elseif splitv:match("^GNUTLS%-SA") then
-							checkGNUTLS(v, k)
+							checkGNUTLS(splitv, k)
+						else
+							violation("unknown security identifier '"..splitv.."'", k, "52", "SC")
 						end
 					end
 				end