feat(depWalker): do not add integrity to payload in cwd for workspace

.changeset/calm-dingos-hunt.md

@@ -1,6 +1,6 @@
 ---
-"@nodesecure/tree-walker": major
-"@nodesecure/scanner": major
+"@nodesecure/tree-walker": minor
+"@nodesecure/scanner": minor
 ---
 
 feat(scanner): add manifest integrity of root dependency in payload

.changeset/warm-jars-draw.md

@@ -0,0 +1,5 @@
+---
+"@nodesecure/scanner": minor
+---
+
+feat(depWalker): do not add integrity to payload in cwd for workspace

workspaces/scanner/src/depWalker.ts

@@ -179,8 +179,14 @@ export async function depWalker(
         dependencies.set(name, dependency);
       }
 
-      if (current.id === kRootDependencyId) {
-        payload.integrity = integrity ?? fromData(JSON.stringify(manifest), { algorithms: ["sha512"] }).toString();
+      const isRoot = current.id === kRootDependencyId;
+
+      if (isRoot && payload.integrity) {
+        payload.integrity = integrity;
+      }
+      else if (isRoot) {
+        const isWorkspace = options.location && "workspaces" in manifest;
+        payload.integrity = isWorkspace ? null : fromData(JSON.stringify(manifest), { algorithms: ["sha512"] }).toString();
       }
 
       // If the dependency is a DevDependencies we ignore it.

workspaces/scanner/test/depWalker.spec.ts

@@ -263,6 +263,7 @@ describe("scanner.cwd()", () => {
     );
 
     assert.strictEqual(result.rootDependencyName, "workspace");
+    assert.strictEqual(result.integrity, null);
   });
 });