Merge pull request #1223 from jonjohnsonjr/panic

Avoid panic if no external config file ref
chainguard-dev · May 22, 2024 · fbf0b9b · fbf0b9b
2 parents e162d67 + e0fa3ec
commit fbf0b9b
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/pkg/build/build.go b/pkg/build/build.go
@@ -737,10 +737,12 @@ func (b *Build) BuildPackage(ctx context.Context) error {
 		return fmt.Errorf("failed to create ExternalRef for configfile: %w", err)
 	}
 
-	// In SPDX v3 there is dedicate field for this
-	// https://spdx.github.io/spdx-spec/v3.0/model/Build/Properties/configSourceUri/
-	log.Infof("adding external ref %s for ConfigFile", configFileRef)
-	externalRefs = append(externalRefs, *configFileRef)
+	if configFileRef != nil {
+		// In SPDX v3 there is dedicate field for this
+		// https://spdx.github.io/spdx-spec/v3.0/model/Build/Properties/configSourceUri/
+		log.Infof("adding external ref %s for ConfigFile", configFileRef)
+		externalRefs = append(externalRefs, *configFileRef)
+	}
 
 	if b.EmptyWorkspace {
 		log.Infof("empty workspace requested")