Fix self-edge errors

What does this MR do?

Prevent panic: simple: adding self edge [recovered] errors when parsing DOT graphs (Sbt), and when creating the dependency graph used to generate the report (yarn, and possibly others).

In both cases, this is needed because the graph struct being used is a simple.DirectedGraph, and this type of graph doesn't support self-edges.

Self-edges can be safely ignored because they can't be used to explain why a vulnerable dependency is part of the dependency chain.

What are the relevant issue numbers?

gitlab-org/gitlab#333254 (closed)

Does this MR meet the acceptance criteria?

Edited by Fabien Catteau

Merge request reports

Loading