[pipaudit] Add option to ignore vulnerabilities

[jannowotsch]

Extend the pipaudit rule, adding an option to ignore vulnerabilities.

Sometimes a vulnerability does not have a fix yet. In such a case, the user must be able to ignore those as there is no other option for third-party libraries.

One such case is the vulnerability https://github.com/advisories/GHSA-4xh5-x5gv-qwph, which is now affecting pip 25.2 as well but there is still no fix for it. Hence, it needs to be tolerated.

[github-actions]

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output

[License Check Output]
Extracting Bazel installation...
Starting local Bazel server and connecting to it...
INFO: Invocation ID: 0d869168-bf39-4a14-9690-e958fac4b58d
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 2 packages loaded
Analyzing: target //:license-check (3 packages loaded, 0 targets configured)
Analyzing: target //:license-check (3 packages loaded, 0 targets configured)

Analyzing: target //:license-check (66 packages loaded, 10 targets configured)

Analyzing: target //:license-check (112 packages loaded, 800 targets configured)

Analyzing: target //:license-check (120 packages loaded, 2317 targets configured)

Analyzing: target //:license-check (124 packages loaded, 2345 targets configured)

Analyzing: target //:license-check (128 packages loaded, 2370 targets configured)

Analyzing: target //:license-check (130 packages loaded, 4379 targets configured)

INFO: Analyzed target //:license-check (132 packages loaded, 4626 targets configured).
[8 / 13] checking cached actions
[10 / 13] checking cached actions
[11 / 13] [Prepa] JavaToolchainCompileBootClasspath external/rules_java~/toolchains/platformclasspath.jar
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 21.371s, Critical Path: 0.77s
INFO: 13 processes: 3 disk cache hit, 9 internal, 1 processwrapper-sandbox.
INFO: Build completed successfully, 13 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt -review -project automotive.score -repo https://github.com/eclipse-score/bazel-tools-python -token
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

[lucasmuna]

I would not add it as a fix is already available with pip 25.3