code: function prepareWhitelist(whitelist) {
  	if (whitelist) {
          logger.info(colors.bold('Applying whitelist filtering for JUnit reports. Take care to keep the whitelist up to date!'));
  
  		// The white-list is either a list or the old format, which is an object with more
  		// complex structures.
  	    whitelist = JSON.parse(whitelist);
  
  	    // Ensure whitelist is in the expected format
  	    whitelist = simplifyWhitelist(whitelist);
  	}
  
    // Read the whitelist from a config file
    if (config.has('whitelist.ignore')) {
      if(!whitelist) {
        whitelist = [];
      }
  
      var myWhitelist = config.get('whitelist.ignore');
      for (var i = 0; i < myWhitelist.length; i++) {
        whitelist.push({
          "id": myWhitelist[i]
        });
      }
    }
  
    // Convert the list to a map for easy lookup
    if (whitelist) {
      var whitelistMap = {};
      for (var i = 0; i < whitelist.length; i++) {
        var key = whitelist[i].id;
        whitelistMap[key] = whitelist[i];
      }
      whitelist = whitelistMap;
    }
  
  	return whitelist;
  }
docs: Do some preparations on the whitelist, which results in it being a map of vulnerability
  IDs (to themselves).