In order to compute vulnerabilities, the IoP Vulnerability service relies on uploaded inventory reports with package profiles.

rh_cloud has two settings, "Minimal data collection" and "Exclude package profiles", which cause package profiles not to be included in reports. If either of these settings are on, the IoP Vulnerability service would not work properly.

In the case of IoP, these settings should be ignored (or better yet, not defined) so that inventory reports always include the necessary information.