fix: update squashfs VENDOR_PRODUCT

[ffontaine]

Replace squashfs-tools by squashfs-tools_project as squashfs-tools:squashfs-tools is not a valid CPE ID: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Asquashfs-tools%3Asquashfs-tools

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (10ddd3a) 78.66% compared to head (1de27c1) 78.42%.

❗ Current head 1de27c1 differs from pull request most recent head e0e54ec. Consider uploading reports for the commit e0e54ec to get more accurate results

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3605      +/-   ##
==========================================
- Coverage   78.66%   78.42%   -0.25%     
==========================================
  Files         773      773              
  Lines       11641    11641              
  Branches     1362     1362              
==========================================
- Hits         9157     9129      -28     
- Misses       2048     2094      +46     
+ Partials      436      418      -18     

Flag	Coverage Δ
win-longtests	78.42% <ø> (-0.23%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[terriko]

Thanks! I've opened up #3628 to maybe catch some of these when PRs are made but I wonder if we also need a script that checks all of them once a week or something.