Feature: 1. more complete report in json and cyclonedx-json. 2. error when get sbom from trivy or syft. about dep-scan HOT 6 CLOSED

@prabhu #261 PR :)

from dep-scan.

Yes, of course. Should I do same thing for KeyError with 'version'? Or after fixing purl will the problem with key error 'version' also disappear?

from dep-scan.

@almaz045 With both, please. like .get("purl", "") and .get("version", ""). Thank you!

from dep-scan.

For 1, can you check the .vdr.json file. It must have everything that is printed under the vulnerabilities attribute. For 2, can you attach a sample so we can guide towards sending a PR?

from dep-scan.

For 2:
trivy-sbom.json - this is sbom trivy that give keyerror: 'purl'
bom-source-trivy.json - this is sbom trivy that give keyerror: 'version'

depscan --bom bom-source-trivy.json

from dep-scan.

@almaz045 Thank you. Would you like to become a contributor? To resolve KeyError in python we have to replace bracket based lookup ["purl"] with .get("purl"). Wrap in an if condition to handle None

from dep-scan.