From 91604b5de2d195a86042ad8a6b24427a1e804052 Mon Sep 17 00:00:00 2001 From: Zvi Grinberg Date: Wed, 1 Nov 2023 18:21:02 +0200 Subject: [PATCH] fix: python exhortignore - when there is a version mismatch also for component analysis Signed-off-by: Zvi Grinberg --- src/providers/python_pip.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/providers/python_pip.js b/src/providers/python_pip.js index 3888b0bf..486d721a 100644 --- a/src/providers/python_pip.js +++ b/src/providers/python_pip.js @@ -219,7 +219,7 @@ function getSbomForComponentAnalysis(data, opts = {}) { sbom.addDependency(sbom.getRoot(),toPurl(dep.name, dep.version)) }) fs.rmSync(tmpDir, { recursive: true, force: true }); - handleIgnoredDependencies(data,sbom) + handleIgnoredDependencies(data,sbom,opts) // In python there is no root component, then we must remove the dummy root we added, so the sbom json will be accepted by exhort backend sbom.removeRootComponent() return sbom.getAsJsonString()