From 6ecd8d5419abd1e70be00a7acbdfe88f6f7a2557 Mon Sep 17 00:00:00 2001 From: Zvi Grinberg Date: Thu, 18 Jan 2024 18:11:30 +0200 Subject: [PATCH] fix: bug in stack/component analysis with path having spaces Signed-off-by: Zvi Grinberg --- src/providers/java_maven.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/providers/java_maven.js b/src/providers/java_maven.js index 32650f3..86f6562 100644 --- a/src/providers/java_maven.js +++ b/src/providers/java_maven.js @@ -183,7 +183,7 @@ function createSbomStackAnalysis(manifest, opts = {}) { let tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'exhort_')) let tmpDepTree = path.join(tmpDir, 'mvn_deptree.txt') // build initial command (dot outputType is not available for verbose mode) - let depTreeCmd = `${mvn} -q org.apache.maven.plugins:maven-dependency-plugin:3.6.0:tree -Dverbose -DoutputType=text -DoutputFile=${tmpDepTree} -f ${handleSpacesInPath(manifest)}` + let depTreeCmd = `${mvn} -q org.apache.maven.plugins:maven-dependency-plugin:3.6.0:tree -Dverbose -DoutputType=text -DoutputFile=${handleSpacesInPath(tmpDepTree)} -f ${handleSpacesInPath(manifest)}` // exclude ignored dependencies, exclude format is groupId:artifactId:scope:version. // version and scope are marked as '*' if not specified (we do not use scope yet) let ignoredDeps = new Array() @@ -247,7 +247,7 @@ function getSbomForComponentAnalysis(data, opts = {}, manifestPath) { // create effective pom and save to temp file - execSync(`${mvn} -q help:effective-pom -Doutput=${tmpEffectivePom} -f ${handleSpacesInPath(targetPom)}`, err => { + execSync(`${mvn} -q help:effective-pom -Doutput=${handleSpacesInPath(tmpEffectivePom)} -f ${handleSpacesInPath(targetPom)}`, err => { if (err) { throw new Error('failed creating maven effective pom') }