Ubuntu: Handle duplicate CCI findings in Ubuntu OSCAP report

Background

The OCAP parsing script currently does not expect duplicate finding IDs. When testing the Ubuntu OSCAP scans, we are seeing that there is the potential for an identifier to be returned more than once, which breaks the existing script.

AC

• Update OSCAP script to handle reports with multiple finding identifiers