Ignore CWE-937 and CWE-1035 reported in GitLab advisories when computing weakness TODOs

[keshav-space]

[ziadhany]

I think we should ignore all category nodes, not just CWE-937 and CWE-1035. Leaf CWE IDs have more accurate descriptions.

[keshav-space]

I think we should ignore all category nodes, not just CWE-937 and CWE-1035. Leaf CWE IDs have more accurate descriptions.

@ziadhany yeah, that makes sense. we’ll ignore CWE IDs that belong to categories or views and only allow comparisons on actual weaknesses.