[zep noup] zephyr: add CPE/PURL security info for 2.1.4

Add CPE and PURL references for use by Zephyr's SPDX generation tool. Signed-off-by: Matt Rodgers <mrodgers@witekio.com> Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>

Author: tomi-font

zephyr/module.yml

@@ -3,3 +3,8 @@ name: trusted-firmware-m
 build:
  cmake-ext: True
  kconfig-ext: True
+
+security:
+ external-references:
+ - cpe:2.3:o:arm:trusted_firmware-m:2.1.4:-:*:*:*:*:*:*
+ - pkg:generic/trusted-firmware-m@TF-Mv2.1.4?vcs_url=git%2Bhttps://review.trustedfirmware.org/TF-M/trusted-firmware-m