Add spdx relationship encoding for dependencies (#1342)

Co-authored-by: Keith Zantow <kzantow@gmail.com>
anchore · Nov 18, 2022 · 9afc923 · 9afc923
1 parent 42cb0a4
commit 9afc923
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/syft/formats/common/spdxhelpers/to_format_model.go b/syft/formats/common/spdxhelpers/to_format_model.go
@@ -362,6 +362,8 @@ func lookupRelationship(ty artifact.RelationshipType) (bool, RelationshipType, s
 	switch ty {
 	case artifact.ContainsRelationship:
 		return true, ContainsRelationship, ""
+	case artifact.DependencyOfRelationship:
+		return true, DependencyOfRelationship, ""
 	case artifact.OwnershipByFileOverlapRelationship:
 		return true, OtherRelationship, fmt.Sprintf("%s: indicates that the parent package claims ownership of a child package since the parent metadata indicates overlap with a location that a cataloger found the child package by", ty)
 	}