enforce that the "cwe" attribute of a <report> (if given) is an integer