Make --quiet work again #286
Description
The --quiet flag was a user request for us to have a version that printed absolutely no output, but gave as return value the list of CVEs found. This was useful for some automated tests.
In #276 we switched all the output to use the logging system. I thought since we weren't logging critical errors, that --log critical would therefore hide all messages. But it does not, because we still print the list of CVEs found in output_cves. So, we should probably fix that so a fully quiet mode is available, and fix the documentation to explain the appropriate way to do that.
I'm kind of leaning towards putting --quiet back and having it just be a shortcut that sets --log critical, since it'll be less annoying for the people already using --quiet right now, but I could probably be convinced otherwise.