add support for yocto cve-check metadata