From 0393d173bbac5c708472deb07d96852c97b4dfe8 Mon Sep 17 00:00:00 2001
From: Noah Santschi-Cooney <noah@santschi-cooney.ch>
Date: Mon, 28 Apr 2025 18:11:30 +0100
Subject: [PATCH] fix: ignore reference to 'go@version' from newer `go mod
 graph` output

---
 src/providers/golang_gomodules.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/providers/golang_gomodules.js b/src/providers/golang_gomodules.js
index 570ed70..178c981 100644
--- a/src/providers/golang_gomodules.js
+++ b/src/providers/golang_gomodules.js
@@ -262,7 +262,9 @@ function getSBOM(manifest, opts = {}, includeTransitive) {
 	let ignoredDeps = getIgnoredDeps(manifest);
 	let allIgnoredDeps = ignoredDeps.map((dep) => dep.toString())
 	let sbom = new Sbom();
-	let rows = goGraphOutput.split(getLineSeparatorGolang());
+	let rows = goGraphOutput.split(getLineSeparatorGolang()).filter(line => {
+		return !line.includes(' go@');
+	});
 	let root = getParentVertexFromEdge(rows[0])
 	let matchManifestVersions = getCustom("MATCH_MANIFEST_VERSIONS", "false", opts);
 	if(matchManifestVersions === "true") {