oelint: Suppress advisory CVE_PRODUCT and BUGTRACKER layer-wideoelint-cleanup-4-config-suppress

oelint.var.suggestedvar.CVE_PRODUCT (179 findings) and
oelint.var.suggestedvar.BUGTRACKER (191 findings) are advisory
"suggested" variables. The overwhelming majority of recipes in this
layer package NXP firmware and BSP components that have no upstream bug
tracker and no meaningful NVD CPE product.

Filling CVE_PRODUCT with a guessed product string is actively harmful:
it makes cve-check match the wrong CPE, producing false positives and
masking real advisories. Leaving it unset is the correct default.

Suppress both layer-wide rather than annotating hundreds of recipes.
The rare recipe that does have a real value can still set it inline.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>

0 files changed, 0 insertions, 0 deletions