Add the ability to ignore by package, cve, or advisory link. I'm not sure how I feel about this. I'd rather not allow for it, but open for it if certain use cases demand it.