all: require cve_metadata for first-party reports

For first-party reports, we usually assign the CVE.
Add a lint check to make sure cve_metadata is set.

Add a no_cve_metadata bool to reports for the case
when the CVE was externally assigned.

Change-Id: I151c901302f62f53bfec880ce6359586d8d61439
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/716180
LUCI-TryBot-Result: Go LUCI <[email protected]>
Auto-Submit: Damien Neil <[email protected]>
Reviewed-by: Roland Shoemaker <[email protected]>

Author: neild

data/reports/GO-2021-0067.yaml

@@ -23,4 +23,5 @@ references:
     - fix: https://go.googlesource.com/go/+/cd3b4ca9f20fd14187ed4cdfdee1a02ea87e5cd8
     - report: https://go.dev/issue/44916
     - web: https://groups.google.com/g/golang-announce/c/MfiLYjG-RAw/m/zzhWj5jPAQAJ
+no_cve_metadata: true
 review_status: REVIEWED

data/reports/GO-2021-0068.yaml

@@ -28,4 +28,5 @@ references:
     - web: https://groups.google.com/g/golang-announce/c/mperVMGa98w/m/yo5W5wnvAAAJ
     - fix: https://go.dev/cl/284780
     - fix: https://go.googlesource.com/go/+/46e2e2e9d99925bbf724b12693c6d3e27a95d6a0
+no_cve_metadata: true
 review_status: REVIEWED

data/reports/GO-2021-0069.yaml

@@ -24,4 +24,5 @@ references:
     - fix: https://go.googlesource.com/go/+/1e1fa5903b760c6714ba17e50bf850b01f49135c
     - report: https://go.dev/issue/42552
     - web: https://groups.google.com/g/golang-announce/c/NpBGTTmKzpM/m/fLguyiM2CAAJ
+no_cve_metadata: true
 review_status: REVIEWED

data/reports/GO-2021-0142.yaml

@@ -36,4 +36,5 @@ references:
     - fix: https://go.googlesource.com/go/+/027d7241ce050d197e7fabea3d541ffbe3487258
     - report: https://go.dev/issue/40618
     - web: https://groups.google.com/g/golang-announce/c/NyPIaucMgXo
+no_cve_metadata: true
 review_status: REVIEWED

data/reports/GO-2021-0154.yaml

@@ -29,4 +29,5 @@ references:
     - fix: https://go.dev/cl/148080043
     - report: https://go.dev/issue/53085
     - web: https://groups.google.com/g/golang-nuts/c/eeOHNw_shwU/m/OHALUmroA5kJ
+no_cve_metadata: true
 review_status: REVIEWED

data/reports/GO-2021-0159.yaml

@@ -42,4 +42,5 @@ references:
     - report: https://go.dev/issue/12027
     - report: https://go.dev/issue/11930
     - web: https://groups.google.com/g/golang-announce/c/iSIyW4lM4hY/m/ADuQR4DiDwAJ
+no_cve_metadata: true
 review_status: REVIEWED

data/reports/GO-2021-0160.yaml

@@ -44,4 +44,5 @@ references:
     - fix: https://go.dev/cl/17672
     - report: https://go.dev/issue/13515
     - web: https://groups.google.com/g/golang-announce/c/MEATuOi_ei4
+no_cve_metadata: true
 review_status: REVIEWED

data/reports/GO-2021-0163.yaml

@@ -24,4 +24,5 @@ references:
     - fix: https://go.googlesource.com/go/+/6a0bb87bd0bf0fdf8ddbd35f77a75ebd412f61b0
     - report: https://go.dev/issue/14959
     - web: https://groups.google.com/g/golang-announce/c/9eqIHqaWvck
+no_cve_metadata: true
 review_status: REVIEWED

data/reports/GO-2021-0172.yaml

@@ -26,4 +26,5 @@ references:
     - fix: https://go.googlesource.com/go/+/7478ea5dba7ed02ddffd91c1d17ec8141f7cf184
     - report: https://go.dev/issue/16296
     - web: https://groups.google.com/g/golang-dev/c/4NdLzS8sls8/m/uIz8QlnIBQAJ
+no_cve_metadata: true
 review_status: REVIEWED

data/reports/GO-2021-0178.yaml

@@ -27,4 +27,5 @@ references:
     - fix: https://go.googlesource.com/go/+/ec3b6131de8f9c9c25283260c95c616c74f6d790
     - report: https://go.dev/issue/22134
     - web: https://groups.google.com/g/golang-dev/c/RinSE3EiJBI/m/kYL7zb07AgAJ
+no_cve_metadata: true
 review_status: REVIEWED