chore: do not HTML escape PackageURLs (#1782)

Signed-off-by: Keith Zantow <kzantow@gmail.com>
anchore · May 10, 2023 · 54e99ef · 54e99ef
1 parent 15f4dbb
commit 54e99ef
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/syft/formats/github/format.go b/syft/formats/github/format.go
@@ -15,13 +15,11 @@ func Format() sbom.Format {
 		func(writer io.Writer, sbom sbom.SBOM) error {
 			bom := toGithubModel(&sbom)
 
-			bytes, err := json.MarshalIndent(bom, "", "  ")
-			if err != nil {
-				return err
-			}
-			_, err = writer.Write(bytes)
+			encoder := json.NewEncoder(writer)
+			encoder.SetEscapeHTML(false)
+			encoder.SetIndent("", "  ")
 
-			return err
+			return encoder.Encode(bom)
 		},
 		nil,
 		nil,