How cve-check-tool resolve custom package name assigned to a package in a recipe?

clearlinux / cve-check-tool

Original Automated CVE Checking Tool

GNU General Public License v2.0

205 stars 78 forks source link

How cve-check-tool resolve custom package name assigned to a package in a recipe? #59

Open NaeemKK opened 7 years ago

NaeemKK commented 7 years ago

I am confused and unable to determine how cve-check-tool resolve the custom package name while finding CVE e.g. I have assigned my own name to the kernel i.e. "Linux-naeem" but using upstream version number.Now how does this tool find CVE by just looking at the name that is not any name of upstream package against which CVE are reported in NVD.