Skip to content

[WIP] tests: fix integrity detection - #1304

Closed
jkowalleck wants to merge 4 commits into
mainfrom
tests/fix-integrity-detection
Closed

[WIP] tests: fix integrity detection#1304
jkowalleck wants to merge 4 commits into
mainfrom
tests/fix-integrity-detection

Conversation

@jkowalleck

Copy link
Copy Markdown
Member

No description provided.

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@jkowalleck jkowalleck added the QA label Jun 13, 2025
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
jkowalleck added a commit that referenced this pull request Jun 23, 2025
the revisit's goal: 
- prefer trusted data from the `npm-ls`. this might lead to changes in
the output.
- properly handle external packages edge-cases. this might lead to
changes in the output.
- try to simplify the implementation's design
- have consistent tests over all systems 

closes #1304 

----


* BREAKING Changes
  * SBOM results might have slightly changed 
* Fixed
  * External dependency edge-cases are now properly nested
* Changed
* SBOM result's `purl` is prefixed with parent-component's one to ensure
uniqueness
  * Uses only trusted data from `npm-ls` internally  
    No changes in data quality are expected.

---------

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant