From: Alex Kiernan <alex.kiernan@gmail.com>
Date: Sat, 7 May 2022 11:22:11 +0000 (+0100)
Subject: pypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGE
X-Git-Tag: lucaceresoli/bug-15201-perf-libtraceevent-missing~4165
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=61f6b0ad09bf87cdc2d3f08770b7c44cad1d0e58;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git

pypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGE

The CVE product name for PyPI packages is (usually) the same as the PyPI
package name (and not our recipe name), so use that as the default.

Signed-off-by: Alex Kiernan <alexk@zuma.ai>
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/classes/pypi.bbclass b/meta/classes/pypi.bbclass
index 9405d586018..5fa7b8a6ae2 100644
--- a/meta/classes/pypi.bbclass
+++ b/meta/classes/pypi.bbclass
@@ -24,3 +24,5 @@ S = "${WORKDIR}/${PYPI_PACKAGE}-${PV}"
 
 UPSTREAM_CHECK_URI ?= "https://pypi.org/project/${PYPI_PACKAGE}/"
 UPSTREAM_CHECK_REGEX ?= "/${PYPI_PACKAGE}/(?P<pver>(\d+[\.\-_]*)+)/"
+
+CVE_PRODUCT ?= "python:${PYPI_PACKAGE}"