GitLab

we don't need to do all that magic with ::continue:: and goto, we can
just use gsub to strip away everything between () calls with some lua
magic

thanks stackoverflow https://stackoverflow.com/a/15810519

those are meant to be comments so we don't need to parse them for
security identifiers, so work around with some ugly goto magic to get a
continue keyword for our for-loop

also make a violation for having a security identifier we don't know

it will be a catch-all for any problems with formatting stuff in CVEs
and will have equivalents in GNUTLS-SA, XSA, and others

in the future it will allow us to check against things other than CVEs