CVE auto-fail list

Specify a list of CVE identifiers that will always fail the build when detected, regardless of other threshold settings.

Supported Formats:
Behavior:

Note: CVE IDs must follow the format CVE-YYYY-NNNN (e.g., CVE-2023-1234)