GitLab

variables can't start with '-' so don't check it

- Pass '--' on grep operations that use a variable as regex to avoid having the
 possible input be interpeted as options for grep
- Declare the iterator variable in a loop in a 'local' statement before

This is used by musl and gcompat to install compatiblity files into
/usr/lib64, there are no other reasons to do it.

This brings us in line with the other tools

we should be printint violations to stdout like every other tool

anything before :: denotes the filename, we care about what comes
after which is the URL to fetch the patch