cmd/vulnreport: skip issues that are marked waiting

- Issues that have already been triaged and have the waiting label
  should be skipped when running vulnreport create.

Change-Id: Ib63b03266748fd9fe719040dee7a6ae76be417e3
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/696476
Reviewed-by: Neal Patel <nealpatel@google.com>
Auto-Submit: Ethan Lee <ethanalee@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Markus Kusano <kusano@google.com>
diff --git a/cmd/vulnreport/creator.go b/cmd/vulnreport/creator.go
index f92c55b..e7d601d 100644
--- a/cmd/vulnreport/creator.go
+++ b/cmd/vulnreport/creator.go
@@ -88,6 +88,10 @@
 		return "possibly not Go"
 	}
 
+	if iss.HasLabel(labelWaiting) {
+		return "waiting"
+	}
+
 	if x.rc.HasReport(iss.Number) {
 		return "already has report"
 	}
@@ -303,6 +307,7 @@
 	labelPossiblyNotGo = "possibly not Go"
 	labelOutOfScope    = "excluded: OUT_OF_SCOPE"
 	labelWithdrawn     = "excluded: WITHDRAWN"
+	labelWaiting       = "waiting"
 )
 
 func excludedReason(iss *issues.Issue) report.ExcludedType {