feat: Include EPSS in JSON and CSV output

[Rexbeast2]

fixes #3209
closes #3208

[terriko]

I tweaked the PR title to make a slightly more clear commit message: I know it's obvious to you that this is EPSS related but the original message sounded like "I've added a feature that is JSON and CSV output" rather than "I've modified our existing CSV and JSON output to include EPSS"

I'm also going to re-run the failing tests. I think the failures are related to JSON issues on NVD's end and not something you changed, but I need the tests passing either way.

[Rexbeast2]

@terriko I think the same test failing here but are passing on my own local and also on my fork. And for then name of PR I apologize. Next time I will keep that in mind.

[terriko]

This one's got tests! But I'd still like docs and we might need to consider error handling if metrics aren't populated. (maybe the if key != "metric": is enough here, though)

[codecov-commenter]

Codecov Report

Merging #3211 (212ed3e) into main (06b55f7) will decrease coverage by 0.08%.
The diff coverage is 87.50%.

@@            Coverage Diff             @@
##             main    #3211      +/-   ##
==========================================
- Coverage   81.01%   80.94%   -0.08%     
==========================================
  Files         716      716              
  Lines       11163    11170       +7     
  Branches     1497     1500       +3     
==========================================
- Hits         9044     9041       -3     
- Misses       1719     1724       +5     
- Partials      400      405       +5     

Flag	Coverage Δ
longtests	75.51% <87.50%> (-4.98%)	⬇️
win-longtests	78.86% <87.50%> (+0.08%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files Changed	Coverage Δ
test/test_available_fix.py	76.47% <ø> (ø)
test/test_output_engine.py	96.66% <ø> (ø)
cve_bin_tool/output_engine/__init__.py	60.47% <50.00%> (-0.19%)	⬇️
cve_bin_tool/output_engine/util.py	87.95% <100.00%> (+0.93%)	⬆️

... and 5 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[Rexbeast2]

@terriko, I think it would handle the error now pretty well. And I have also added a test case where the metrics field is empty to check it. And it works. Is there anything more left to add?

[terriko]

Okay, this looks like it's ready to go. Thank you! Let's get it merged.