Implement CVE Changelog generator

[tomuben]

Backlog

Product management asked us to provide a list of fixed CVE's for a new DB release with an updated builtin Script-Language-Container. It would be good to create this automatically when publishing a new release on GH.

Implementation

In order to achieve this we need to implement a script which basically runs the following steps:

• Run security check on current commit and flavor
• Get the previous release
• Checkout previous release in worktree
• Get image info for flavor for previous release with exaslct
• contains the image names (hash)
• Pull docker image from docker hub
• Run trivy, royster on docker image (there should be an option to print CVE's in csv format)
• Compare both cve lists

Depends on

• Create option for creation of build_info script-languages-container-tool#115
• Move CI to AWS Code Build #502