Merge pull request #234 from interlynk-io/233-bug-run-latest-sbom-sco…

…re-returns-with-panic Change from package originator to verifier presense
interlynk-io · Apr 24, 2024 · 7f26bc8 · 7f26bc8
2 parents 32d97df + 173aa5c
commit 7f26bc8
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/sbom/spdx.go b/pkg/sbom/spdx.go
@@ -189,7 +189,8 @@ func (s *spdxDoc) parseComps() {
 			nc.supplier = *supp
 		}
 		nc.supplierName = s.addSupplierName(index)
-		if sc.PackageOriginator != nil {
+
+		if sc.PackageVerificationCode != nil {
 			nc.sourceCodeHash = sc.PackageVerificationCode.Value
 		}