Code review comment for ~litios/ubuntu-cve-tracker:oval/usn-wrong-cve-tags

I'm changing this to work in progress as discussed with David.
We found many corner cases and we are trying to solve it in another approach.
we will update this PR whenever we have a better solution