fix: include package version in vulns lookup

snyk · Oct 6, 2019 · 375402d · 375402d
1 parent 2791798
commit 375402d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/lib/snyk-test/run-test.ts b/src/lib/snyk-test/run-test.ts
@@ -146,7 +146,8 @@ async function runTest(
 
       if (res.docker && dockerfilePackages) {
         res.vulnerabilities = res.vulnerabilities.map((vuln) => {
-          const dockerfilePackage = dockerfilePackages[vuln.name.split('/')[0]];
+          const pkg = vuln.name.split('/')[0] + '-' + vuln.version;
+          const dockerfilePackage = dockerfilePackages[pkg];
           if (dockerfilePackage) {
             (vuln as DockerIssue).dockerfileInstruction =
               dockerfilePackage.instruction;