fix bug#199 (guacsec#207)

Signed-off-by: Nadgowda, Shripad <[email protected]> Signed-off-by: Nadgowda, Shripad <[email protected]>
Qiwen-Zhou · Nov 9, 2022 · 72a13f7 · 72a13f7
1 parent 689cd3b
commit 72a13f7
Showing 1 changed file with 14 additions and 12 deletions.
diff --git a/pkg/ingestor/parser/cyclonedx/parser_cyclonedx.go b/pkg/ingestor/parser/cyclonedx/parser_cyclonedx.go
@@ -94,18 +94,20 @@ func (c *cyclonedxParser) CreateEdges(ctx context.Context, foundIdentities []ass
 
 func (c *cyclonedxParser) addRootPackage(cdxBom *cdx.BOM) {
 	// oci purl: pkg:oci/debian@sha256%3A244fd47e07d10?repository_url=ghcr.io/debian&tag=bullseye
-	splitImage := strings.Split(cdxBom.Metadata.Component.Name, "/")
-	if len(splitImage) == 3 {
-		rootPackage := assembler.PackageNode{}
-		rootPackage.Purl = "pkg:oci/" + splitImage[2] + "?repository_url=" + splitImage[0] + "/" + splitImage[1]
-		rootPackage.Name = cdxBom.Metadata.Component.Name
-		rootPackage.Version = cdxBom.Metadata.Component.Version
-		rootPackage.Digest = append(rootPackage.Digest, cdxBom.Metadata.Component.Version)
-		rootPackage.Tags = []string{"CONTAINER"}
-		rootPackage.NodeData = *assembler.NewObjectMetadata(c.doc.SourceInformation)
-		c.rootPackage = parentPackages{
-			curPackage:  rootPackage,
-			depPackages: []parentPackages{},
+	if cdxBom.Metadata.Component != nil {
+		splitImage := strings.Split(cdxBom.Metadata.Component.Name, "/")
+		if len(splitImage) == 3 {
+			rootPackage := assembler.PackageNode{}
+			rootPackage.Purl = "pkg:oci/" + splitImage[2] + "?repository_url=" + splitImage[0] + "/" + splitImage[1]
+			rootPackage.Name = cdxBom.Metadata.Component.Name
+			rootPackage.Version = cdxBom.Metadata.Component.Version
+			rootPackage.Digest = append(rootPackage.Digest, cdxBom.Metadata.Component.Version)
+			rootPackage.Tags = []string{"CONTAINER"}
+			rootPackage.NodeData = *assembler.NewObjectMetadata(c.doc.SourceInformation)
+			c.rootPackage = parentPackages{
+				curPackage:  rootPackage,
+				depPackages: []parentPackages{},
+			}
 		}
 	}
 }