Add the vulnerability description from NVD in the export of the vuln dashboard

[zayhanlon]

Goal

User story
As an admin of the Fleet vulnerability dashboard,
I want view the description of each CVE
so that I can pass that information to the teams responsible for remediation without requiring repeated click-throughs

• Use the vuln description field from NVD.
• When we store a vuln record in our DB, also store the NVD description.
• Return the vuln description in the API
• No need to show this new column in the dashboard itself. Just add it to the CSV export.

Changes

This issue's estimation includes completing:

• [ ] UI changes: https://www.figma.com/file/g4Ka3ENqqvVuW2Cu7xi5I5/%2311778-Vulnerability-dashboard-export-includes-host-serial-number?type=design&node-id=2-130&mode=design
• [ ] API: Include a new attribute in the vulnerability object called description that returns the description data from NVD.

ℹ️  Please read this issue carefully and understand it. Pay special attention to UI wireframes, especially "dev notes".

Context

• Requestor(s): @zayhanlon

QA

Risk assessment

• [ ] Requires load testing TODO

Risk level: Low / High TODO

Risk description: TODO

Automated:

• Fleet: Cover / Will not cover
• QAWolf: Cover / Will not cover

Manual testing steps

1. Step 1
2. Step 2
3. Step 3

Testing notes

Confirmation

1. [ ] Engineer (@____): Added comment to user story confirming succesful completion of QA.
2. [ ] QA (@____): Added comment to user story confirming succesful completion of QA.

[zhumo]

@zayhanlon taking this off the prioritized board because it's not likely to be designed and shipped within 6 weeks. Please bring it back to FF for consideration if it continues to be desired.

[zayhanlon]

@zhumo Eric doesn't have a ton in his queue and this is a mandatory request from customer-faltona. Should be like a 30 min design thing, I could prob do myself and have Rachael review with Mike this week.

[zhumo]

@zayhanlon Rachael's focus is on prospect R. If you would, please mock up and bring to design review.

[zhumo]

@zayhanlon FYI: we're gonna have the Fleet instance store and return the NVD data, rather than have the customer do it.

[zhumo]

Hi @zayhanlon this issue didn't make it into this sprint. Please feel free to add this to feature fest.