Modularize CSV outputs/Check CVE/VAT

We need to look at the scanning stage and refactor wherever necessary to:

• remove code duplication
• improve reusability
• improve our code coverage (adding unit tests)
• allow for easier local use/testing (this may not be possible for these jobs at the moment)