Bug fix: Hashes were incorrectly dumped as a list. Updated packages.

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>
owasp-dep-scan · Mar 19, 2024 · b7986fd · prabhu · Apr 8, 2024 · prabhu
1 parent 2bcaacb
commit b7986fd
Show file tree

Hide file tree

Showing 3 changed files with 115 additions and 115 deletions.
diff --git a/blint/sbom.py b/blint/sbom.py
@@ -517,7 +517,7 @@ def process_dotnet_dependencies(dotnet_deps: dict[str, dict], dependencies_dict:
             ],
         )
         if hash_content:
-            comp.hashes = [Hash(alg=HashAlg.SHA_512, content=hash_content)],
+            comp.hashes = Hash(alg=HashAlg.SHA_512, content=hash_content),
         comp.bom_ref = RefType(purl)
         components.append(comp)
     targets: dict[str, dict[str, dict]] = dotnet_deps.get("targets", {})
@@ -567,7 +567,7 @@ def process_go_dependencies(go_deps: dict[str, str]) -> list[Component]:
             except binascii.Error:
                 hash_content = str(v.get("hash").removeprefix("h1:"))
         if hash_content:
-            comp.hashes = [Hash(alg=HashAlg.SHA_256, content=hash_content)]
+            comp.hashes = Hash(alg=HashAlg.SHA_256, content=hash_content)
         comp.bom_ref = RefType(f"""pkg:golang/{k}@{v.get("version")}""")
         components.append(comp)
     return components