Allow to define reviewed security vulnerabilities

Currently, all security issues are fetch from remote security databases.
The list of found security vulnerabilities is then listed blindly.
This can lead to the listing of false positives (i.e., vulnerabilities we know are safe in our context, but are still linked to libraries we depend on).

It should be possible to filter them out.