fix(azure): support of multiple criterion

[DmitriyLewen]

Description

We need to save all criterion for definition.
e.g. :

<criteria operator="AND">
  <criterion comment="Package golang is earlier than 1.20.7-1, affected by CVE-2023-29409" test_ref="oval:com.microsoft.azurelinux:tst:52881000"/>
  <criterion comment="Package golang is greater than 0.0.0, affected by CVE-2023-29409" test_ref="oval:com.microsoft.azurelinux:tst:52881003"/>
</criteria>

Test GH actions run - https://github.com/DmitriyLewen/vuln-list-update/actions/runs/11832818656/job/32970285972

Changes

These changes affect only definitions/<year>/*.json files.

Before(https://github.com/aquasecurity/vuln-list/blob/b9a2b63e2a5e1c1db6dd31af38460eb2b666dcd2/azure/3.0/definitions/2023/52881-2.json#L23-L26):

  "Criteria": {
    "Operator": "AND",
    "Criterion": {
      "Comment": "Package golang is greater than 0.0.0, affected by CVE-2023-29409",
      "TestRef": "oval:com.microsoft.azurelinux:tst:52881003"
    }
  }

After(https://github.com/DmitriyLewen/vuln-list/blob/96b886e4e225b3fe02d0bda1f0cebd72d68f4b9a/azure/3.0/definitions/2023/52881-2.json#L23-L31):

  "Criteria": {
    "Operator": "AND",
    "Criterion": [
      {
        "Comment": "Package golang is earlier than 1.20.7-1, affected by CVE-2023-29409",
        "TestRef": "oval:com.microsoft.azurelinux:tst:52881000"
      },
      {
        "Comment": "Package golang is greater than 0.0.0, affected by CVE-2023-29409",
        "TestRef": "oval:com.microsoft.azurelinux:tst:52881003"
      }
    ]
  }

Related Issues:

• bug(azure): error when parse azure advisories trivy-db#468