Default claircore matcher is configured to use all available sources for CVEs (updaters for Ubuntu, Python, Java, Go etc). We might want to either hard-limit it to RHEL ecosystem or make it configurable.

See