Fix top level artifacts not being added with the DOCUMENT key

Signed-off-by: Narsimham Chelluri (Narsa) <narsa@kusari.dev>
guacsec · Apr 30, 2024 · ef875cf · ef875cf
1 parent 8acf388
commit ef875cf
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkg/ingestor/parser/spdx/parse_spdx.go b/pkg/ingestor/parser/spdx/parse_spdx.go
@@ -151,6 +151,9 @@ func (s *spdxParser) getPackages() error {
 				Algorithm: strings.ToLower(string(checksum.Algorithm)),
 				Digest:    checksum.Value,
 			}
+			if slices.Contains(topLevelSpdxIds, string(pac.PackageSPDXIdentifier)) {
+				s.packageArtifacts[string(s.spdxDoc.SPDXIdentifier)] = append(s.packageArtifacts[string(s.spdxDoc.SPDXIdentifier)], artifact)
+			}
 			s.packageArtifacts[string(pac.PackageSPDXIdentifier)] = append(s.packageArtifacts[string(pac.PackageSPDXIdentifier)], artifact)
 		}