[bug] Empty status returned by trusted content is causing NPE

[ruromero]

When TPA is not returning a CVE with status the recommendations process is throwing a NPE.

Downstream issue: https://issues.redhat.com/browse/TC-2553