feat: "override" database

[afdesk]

• close Trivy "override" database trivy#2261

[afdesk]

I've added overriding for OSV and GHSA advisories with next setting file: override.yaml.
also, there were included OSV advisories for Rust.

before (the current output):

Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 2, CRITICAL: 0)

┌─────────────┬─────────────────────┬──────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────┐
│   Library   │    Vulnerability    │ Severity │ Installed Version │ Fixed Version │                        Title                        │
├─────────────┼─────────────────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────┤
│ abomonation │ CVE-2021-45708      │ HIGH     │ 0.7.0             │               │ Exposure of Resource to Wrong Sphere in abomonation │
│             │                     │          │                   │               │ https://avd.aquasec.com/nvd/cve-2021-45708          │
│             ├─────────────────────┤          │                   ├───────────────┼─────────────────────────────────────────────────────┤
│             │ GHSA-hfxp-p695-629x │          │                   │               │ abomonation transmutes &T to and from &[u8] without │
│             │                     │          │                   │               │ sufficient constraints                              │
│             │                     │          │                   │               │ https://github.com/advisories/GHSA-hfxp-p695-629x   │
└─────────────┴─────────────────────┴──────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────┘

after:

Cargo.lock (cargo)

Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌─────────────┬────────────────┬──────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────┐
│   Library   │ Vulnerability  │ Severity │ Installed Version │ Fixed Version │                        Title                        │
├─────────────┼────────────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────┤
│ abomonation │ CVE-2021-45708 │ MEDIUM   │ 0.7.0             │               │ abomonation transmutes &T to and from &[u8] without │
│             │                │          │                   │               │ sufficient constraints                              │
│             │                │          │                   │               │ https://avd.aquasec.com/nvd/cve-2021-45708          │
└─────────────┴────────────────┴──────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────┘

this result is for next command:

$ trivy --cache-dir ~/.cache/vuln-list-update/ -d fs ~/demo-data/rust-cargo/

for tests I use next cargo file:

[[package]]
name = "hello_world"
version = "0.1.0"
dependencies = [
 "regex 1.5.0 (git+https://github.com/rust-lang/regex.git#9f9f693768c584971a4d53bc3c586c33ed3a6831)",
]

[[package]]
name = "abomonation"
version = "0.7.0"
source = "git+https://github.com/rust-lang/regex.git#9f9f693768c584971a4d53bc3c586c33ed3a6831"