Include open issues in official CVE feed

[sftim]

https://kubernetes.io/docs/reference/issues-security/official-cve-feed/ should include all public CVE IDs, even ones where we have not yet shipped a patch.

@PushkarJ FYI

[mtardy]

We discussed that we could use the (close) status of the issue to retrieve three states for the CVE feed items:

• issue open -> not fixed
• issue closed as completed -> fixed (patch exists)
• issue closed as not planned -> won't fix (patch will not be issued)

Pushkar mentioned that we should make sure the official-cve-feed label imposes the same condition as lifecycle/frozen label to avoid the unintended closing of the issue.

[PushkarJ]

This is fixed via #97 should be followed up with #98

[PushkarJ]

/close

[k8s-ci-robot]

@PushkarJ: Closing this issue.

In response to this:

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.