feat(csaf): use csaf evaluation by default

[psegedy]

Secure Coding Practices Checklist GitHub Link

• https://github.com/RedHatInsights/secure-coding-checklist

Secure Coding Checklist

• Input Validation
• Output Encoding
• Authentication and Password Management
• Session Management
• Access Control
• Cryptographic Practices
• Error Handling and Logging
• Data Protection
• Communication Security
• System Configuration
• Database Security
• File Management
• Memory Management
• General Coding Practices

[jira-linking]

Commits missing Jira IDs:
a02473f
cc2fa80
Referenced Jiras:
https://issues.redhat.com/browse/RHINENG-7871

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 23.52941% with 13 lines in your changes missing coverage. Please review.

Project coverage is 62.05%. Comparing base (5a56460) to head (cc2fa80).
Report is 41 commits behind head on master.

Files with missing lines	Patch %	Lines
vmaas-go/webapp/controllers/vulnerabilities.go	0.00%	5 Missing ⚠️
vmaas-go/webapp/controllers/utils.go	50.00%	3 Missing and 1 partial ⚠️
vmaas-go/webapp/controllers/updates.go	0.00%	3 Missing ⚠️
vmaas-go/base/core/config.go	0.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1133      +/-   ##
==========================================
- Coverage   62.98%   62.05%   -0.93%     
==========================================
  Files          70       76       +6     
  Lines        6800     6974     +174     
==========================================
+ Hits         4283     4328      +45     
- Misses       2517     2643     +126     
- Partials        0        3       +3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[fpjrh]

@jdobes can you provide a code review here? Thank you!

[psegedy]

Merging without review as we need to enable csaf in stage env.
Test failure seem unrelated

schema.SchemaMissingKeyError: Missing key: 'modules_list'