classes: don't scan for CVEs in images or packagegroups

There's no point even looking in the database for these, so unset CVE_PRODUCT.

Signed-off-by: Ross Burton <ross.burton@intel.com>

diff --git a/meta/classes/image.bbclass b/meta/classes/image.bbclass
index 7abb9182120d9f57bd71997641e710633c347f0d..23ed53deb4bee235880b8b44c4191ecea45f2c8f 100644 (file)
--- a/meta/classes/image.bbclass
+++ b/meta/classes/image.bbclass
@@ -674,3 +674,5 @@ reproducible_final_image_task () {
     fi
 }
 IMAGE_PREPROCESS_COMMAND_append = " reproducible_final_image_task; "
+
+CVE_PRODUCT = ""

diff --git a/meta/classes/packagegroup.bbclass b/meta/classes/packagegroup.bbclass
index eea2e5b9fcfcc41a783782aeb8de5fcacec46bc9..d540d4214eb8786cde90f8185415e25d0aaded39 100644 (file)
--- a/meta/classes/packagegroup.bbclass
+++ b/meta/classes/packagegroup.bbclass
@@ -56,3 +56,4 @@ python () {
         bb.fatal("Please ensure that your setting of VIRTUAL-RUNTIME_init_manager (%s) matches the entries enabled in DISTRO_FEATURES" % initman)
 }
 
+CVE_PRODUCT = ""