Skip to content

bug(julia): problem with SBOM relationships, because julia packages don't support Relationship field #8938

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
DmitriyLewen opened this issue May 29, 2025 · 0 comments · Fixed by #8939
Assignees
Labels
kind/bug Categorizes issue or PR as related to a bug.

Comments

@DmitriyLewen
Copy link
Contributor

Description

julia analyzer supports only indirect field.
Therefore, due to the lack of a relationship field, Trivy incorrectly builds a dependency tree in a SBOM file.
See example in https://github.com/Octogonapus/trivy-0-59-sbom-regression/tree/f84027f369029c57aefa1fef3d422570db548646

Solution

Fill Relationship filed for julia packages.

Discussed in #8925

@DmitriyLewen DmitriyLewen self-assigned this May 29, 2025
@DmitriyLewen DmitriyLewen added the kind/bug Categorizes issue or PR as related to a bug. label May 29, 2025
@DmitriyLewen DmitriyLewen changed the title bug(julia): problem with SBOM relationships, because julia doesn't support relationship field bug(julia): problem with SBOM relationships, because julia packages don't support Relationship field May 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Categorizes issue or PR as related to a bug.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant