fix: analysis of an empty manifest returns non-zero scanned deps#422
fix: analysis of an empty manifest returns non-zero scanned deps#422a-oren wants to merge 1 commit intoguacsec:mainfrom
Conversation
Review Summary by QodoFix: Exclude root component from SBOM components array
WalkthroughsDescription• Filter root component from SBOM components list • Prevents root component duplication in generated SBOMs • Updates test fixtures to reflect corrected component counts • Removes root component from empty manifest analysis results Diagramflowchart LR
A["SBOM Generation"] -->|Extract rootPurl| B["Root Component PURL"]
A -->|Filter components| C["Filter Logic"]
B -->|Compare| C
C -->|Exclude matching| D["Filtered Components Array"]
D -->|Generate| E["Corrected SBOM Output"]
File Changes1. src/cyclone_dx_sbom.js
|
Code Review by Qodo🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0) 📐 Spec deviations (0)
Great, no issues found!Qodo reviewed your code and found no material issues that require reviewⓘ The new review experience is currently in Beta. Learn more |
a-oren
changed the title
a-oren
changed the title
1 participant
Description
Analysis of an empty manifest returns non-zero scanned depenedencies for all ecosystems
Related issues (if any):
Checklist