Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

bug(bom): unknown dependencies are related to application component and not root component #8102

Open
DmitriyLewen opened this issue Dec 16, 2024 Discussed in #8098 · 0 comments · May be fixed by #8104
Open

bug(bom): unknown dependencies are related to application component and not root component #8102

DmitriyLewen opened this issue Dec 16, 2024 Discussed in #8098 · 0 comments · May be fixed by #8104
Assignees
@DmitriyLewen
Labels
kind/bug Categorizes issue or PR as related to a bug.
Milestone
v0.59.0

Comments

@DmitriyLewen
Copy link
Contributor

Description

#7985 changed logic for relating unknown dependencies to parent component.
For v0.57.1 the parent component is the root package (if it exists)
For v0.58.0 the parent component is the application component.

For this reason, VEX with subcomponents doesn't work .

Discussed in #8098
@DmitriyLewen DmitriyLewen added the kind/bug Categorizes issue or PR as related to a bug. label Dec 16, 2024
@DmitriyLewen DmitriyLewen self-assigned this Dec 16, 2024
@DmitriyLewen DmitriyLewen added this to the v0.58.1 milestone Dec 16, 2024
@DmitriyLewen DmitriyLewen linked a pull request Dec 16, 2024 that will close this issue
Open
7 tasks
@DmitriyLewen DmitriyLewen modified the milestones: v0.58.1, v0.59.0 Dec 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@DmitriyLewen DmitriyLewen

Labels
kind/bug Categorizes issue or PR as related to a bug.
Projects
None yet
Milestone
v0.59.0
Development

Successfully merging a pull request may close this issue.

fix(sbom): use root package for unknown dependencies (if exists) DmitriyLewen/trivy
1 participant
@DmitriyLewen