boot/shim: add SHIM_CPE_ID_VENDOR

cpe:2.3:a:redhat:shim is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aredhat%3Ashim

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
diff --git a/boot/shim/shim.mk b/boot/shim/shim.mk
index ba5bc51..e0f01a8 100644
--- a/boot/shim/shim.mk
+++ b/boot/shim/shim.mk
@@ -8,6 +8,7 @@
 SHIM_SITE = $(call github,rhboot,shim,$(SHIM_VERSION))
 SHIM_LICENSE = BSD-2-Clause
 SHIM_LICENSE_FILES = COPYRIGHT
+SHIM_CPE_ID_VENDOR = redhat
 SHIM_DEPENDENCIES = gnu-efi
 SHIM_INSTALL_TARGET = NO
 SHIM_INSTALL_IMAGES = YES