Stop removing unsupported dependencies

Jim Redmondrequested to merge
stop-removing-unsupported-dependencies into main

Checklist

  • documentation is changed or added in ./docs
  • unit tests updated to test changes

Description

Fix Issue #23 (closed) HopprCopPlugin was removing components from the BOM if they has purl types listed as unsupported. Instead, the components should remain in the BOM, and just let the vulnerability scanners filter out purls if they don't know how to scan them. Two scanners are already doing this. If others should be doing so and aren't, that should be addressed in a separate issue.

Context

Intent

Edited by Jim Redmond

Merge request reports