data/reports: add skip_fix to some cmd reports

Change-Id: Idafd1f4a261e5c4f95f16f2975a782805ea0793a
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/466661
Run-TryBot: Tatiana Bradley <[email protected]>
Reviewed-by: Tim King <[email protected]>
TryBot-Result: Gopher Robot <[email protected]>

Author: tatianab

data/reports/GO-2022-0177.yaml

@@ -7,6 +7,8 @@ modules:
     vulnerable_at: 1.9.0
     packages:
       - package: cmd/go
+        skip_fix: 'TODO: revisit this reason (cant request explicit version of standard
+            library package cmd/go)'
 description: |
     The "go get" command allows remote command execution.
 

data/reports/GO-2022-0201.yaml

@@ -7,6 +7,8 @@ modules:
     vulnerable_at: 1.9.3
     packages:
       - package: cmd/go
+        skip_fix: 'TODO: revisit this reason (cant request explicit version of standard
+            library package cmd/go)'
 description: |
     The "go get" command with cgo is vulnerable to remote command execution
     by leveraging the gcc or clang plugin feature.

data/reports/GO-2022-0203.yaml

@@ -7,6 +7,8 @@ modules:
     vulnerable_at: 1.10.0
     packages:
       - package: cmd/go
+        skip_fix: 'TODO: revisit this reason (cant request explicit version of standard
+            library package cmd/go)'
 description: |
     The "go get" command is vulnerable to remote code execution.