if a Vulnerability has no label, use its fqmn in the VulnerabilityScanner pattern