reports: sets github.com/dgrijalva/jwt-go as incompatible.

github.com/dgrijalva/jwt-go is not module per se. Hence, its pkg
versions require +incompatible annotation. Also, corresponding pkgs do
not have /vX suffixes.

Change-Id: I434b1a6af7ecd22b161d344a2ffe115fa9b883e9
Reviewed-on: https://team-review.git.corp.google.com/c/golang/vulndb/+/1027982
Reviewed-by: Roland Shoemaker <bracewell@google.com>

Author: zpavlinovic

reports/GO-2020-0017.toml

@@ -15,7 +15,7 @@ symbols = ["MapClaims.VerifyAudience"]
 
 [[versions]]
 introduced = "v0.0.0-20150717181359-44718f8a89b0"
-fixed = "v4.0.0-20190408214815-ec0a89a131e"
+fixed = "v4.0.0-20190408214815-ec0a89a131e+incompatible"
 
 [[additional_packages]]
 package = "github.com/dgrijalva/jwt-go/v4"
@@ -25,4 +25,4 @@ fixed = "v4.0.0-20190408214815-ec0a89a131e3"
 
 [links]
 commit = "https://github.com/dgrijalva/jwt-go/commit/ec0a89a131e3e8567adcb21254a5cd20a70ea4ab"
-context = ["https://github.com/dgrijalva/jwt-go/issues/422"]
+context = ["https://github.com/dgrijalva/jwt-go/issues/422"]