pub fn evaluate_vulnerability_policy( findings: &[Finding], policy: &VulnerabilityPolicy, ) -> PolicyEvaluation