refactor: update convert package

Signed-off-by: DmitriyLewen <[email protected]>

convert.go

@@ -195,6 +195,13 @@ func convertEvidence(c *Component, specVersion SpecVersion) {
 	}
 
 	if specVersion < SpecVersion1_6 {
+		// Spec version 1.5 uses only one Identity.
+		// cf. https://cyclonedx.org/docs/1.5/json/#components_items_evidence_identity
+		if c.Evidence.Identity != nil {
+			ids := *c.Evidence.Identity
+			ids = ids[:1]
+			c.Evidence.Identity = &ids
+		}
 		if c.Evidence.Occurrences != nil {
 			for i := range *c.Evidence.Occurrences {
 				occ := &(*c.Evidence.Occurrences)[i]

convert_test.go

@@ -63,6 +63,14 @@ func Test_componentConverter_convertEvidence(t *testing.T) {
 
 		comp := Component{
 			Evidence: &Evidence{
+				Identity: &[]EvidenceIdentity{
+					{
+						Field: EvidenceIdentityFieldTypePURL,
+					},
+					{
+						Field: EvidenceIdentityFieldTypeName,
+					},
+				},
 				Occurrences: &[]EvidenceOccurrence{
 					{
 						BOMRef:            "foo",
@@ -78,6 +86,7 @@ func Test_componentConverter_convertEvidence(t *testing.T) {
 
 		convert(&comp)
 
+		require.Len(t, *comp.Evidence.Identity, 1)
 		require.Len(t, *comp.Evidence.Occurrences, 1)
 		occ := (*comp.Evidence.Occurrences)[0]
 		assert.Nil(t, occ.Line)