Add spdx relationship encoding for dependencies (anchore#1342)

Co-authored-by: Keith Zantow <[email protected]>
GijsCalis · Nov 18, 2022 · a09f2d1 · a09f2d1
1 parent bd66ae2
commit a09f2d1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/syft/formats/common/spdxhelpers/to_format_model.go b/syft/formats/common/spdxhelpers/to_format_model.go
@@ -362,6 +362,8 @@ func lookupRelationship(ty artifact.RelationshipType) (bool, RelationshipType, s
 	switch ty {
 	case artifact.ContainsRelationship:
 		return true, ContainsRelationship, ""
+	case artifact.DependencyOfRelationship:
+		return true, DependencyOfRelationship, ""
 	case artifact.OwnershipByFileOverlapRelationship:
 		return true, OtherRelationship, fmt.Sprintf("%s: indicates that the parent package claims ownership of a child package since the parent metadata indicates overlap with a location that a cataloger found the child package by", ty)
 	}