[meta-virtualization] [scarthgap] [PATCH] go-distribution: Add CVE_PRODUCT to align with NVD CPE

"Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)" <[email protected]> Wed, 22 Apr 2026 21:41:41 -0700
Newsgroups org.yoctoproject.lists.meta-virtualization
Message-ID <[email protected]>
From: Himanshu Jadon <[email protected]>

CVE_PRODUCT has been set to docker:registry to align with the NVD CPE
product namespace for the distribution/registry codebase.

Only a single CPE entry exists in the NVD for this product:
 cpe:2.3:a:docker:registry

This ensures CVEs tracked for docker registry are matched for this recipe.

Signed-off-by: Himanshu Jadon <[email protected]>
Signed-off-by: Bruce Ashfield <[email protected]>
(cherry picked from commit f8bbbf1f7d7b5c7ef6b2c9c86a93cb44524bc740)
Signed-off-by: Himanshu Jadon <[email protected]>
---
 recipes-devtools/go/go-distribution_git.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/recipes-devtools/go/go-distribution_git.bb b/recipes-devtools/go/go-distribution_git.bb
index 598df964..740fdfe4 100644
--- a/recipes-devtools/go/go-distribution_git.bb
+++ b/recipes-devtools/go/go-distribution_git.bb
@@ -39,3 +39,5 @@ go_distribution_digeset_sysroot_preprocess () {
 }
 
 FILES:${PN} += "${prefix}/local/go/src/${PKG_NAME}/*"
+
+CVE_PRODUCT = "docker:registry"
-- 
2.35.6