Import CWE and CVSS info from GHA

[elanzini]

GitHub Advisory also provides CWE and CVSS information for some vulnerabilities.
It is unclear whether this information is also always found on NVD.
To make sure we capture every bit of information, we can add this to the importing in the GHParser.java class.

The updated query would be:

query {
  securityAdvisories(first: 100) {
    nodes {
      description
      identifiers {
        type
        value
      }
      severity
      references {
        url
      }
      cvss {
        score
        vectorString
      }
      cwes(first: 10) {
        nodes {
          cweId
        }
      }
      vulnerabilities(first: 10) {
        nodes {
          package {
            ecosystem
            name
          }
          vulnerableVersionRange
          firstPatchedVersion {
            identifier
          }
        }
      }
    }
    pageInfo {
      endCursor
      hasNextPage
    }
  }
}

Note: CVSS info is provided using version 3