bug: extract license from evidence section if present

anthonyharrison · Nov 15, 2022 · a980cd9 · a980cd9
1 parent 548d9ae
commit a980cd9
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/sbomdiff/cyclonedx_parser.py b/sbomdiff/cyclonedx_parser.py
@@ -30,9 +30,13 @@ def parse_cyclonedx_json(self, sbom_file):
                     package = d["name"]
                     version = d["version"]
                     license = "NOT FOUND"
+                    license_data = None
                     # Multiple ways of defining license data
                     if "licenses" in d and len(d["licenses"]) > 0:
                         license_data = d["licenses"][0]
+                    elif "evidence" in d and len(d["evidence"]["licenses"]) > 0:
+                        license_data = d["evidence"]["licenses"][0]
+                    if license_data is not None:
                         if "license" in license_data:
                             if "id" in license_data["license"]:
                                 license = license_data["license"]["id"]