fix: added a test provoking the error

lib/nuget-parser/parsers/dotnet-core-v2-parser.ts

@@ -17,7 +17,7 @@ interface DotnetPackage {
 }
 
 // Dependencies that starts with these are discarded
-const FILTERED_DEPENDENCY_PREFIX = ['runtime'];
+export const FILTERED_DEPENDENCY_PREFIX = ['runtime'];
 
 // The list of top level dependencies and transitive dependencies differ based on the target runtime we've defined.
 // In the generated dependency file created by the `dotnet` CLI, this is organized by the target framework moniker (TFM).

test/parsers/parse-core-v2.spec.ts

@@ -4,6 +4,7 @@ import * as path from 'path';
 import * as plugin from '../../lib';
 import * as dotnet from '../../lib/nuget-parser/cli/dotnet';
 import { legacyPlugin as pluginApi } from '@snyk/cli-interface';
+import { FILTERED_DEPENDENCY_PREFIX } from '../../lib/nuget-parser/parsers/dotnet-core-v2-parser';
 
 describe('when generating depGraphs and runtime assemblies using the v2 parser', () => {
   it.each([
@@ -107,6 +108,32 @@ describe('when generating depGraphs and runtime assemblies using the v2 parser',
     },
   );
 
+  it('does not include ignored packages in the resulting depGraph', async () => {
+    const projectPath = './test/fixtures/dotnetcore/dotnet_8';
+    await dotnet.restore(projectPath);
+    const manifestFile = 'obj/project.assets.json';
+    const result = await plugin.inspect(projectPath, manifestFile, {
+      'dotnet-runtime-resolution': true,
+    });
+
+    if (!pluginApi.isMultiResult(result)) {
+      throw new Error('expected a multiResult response from inspection');
+    }
+
+    const depGraph = result.scannedProjects[0].depGraph;
+
+    // TS doesn't get expect().toBeDefined() and will still complain
+    if (!depGraph) {
+      throw new Error('expected depGraph to be defined');
+    }
+
+    const pkgNames = depGraph.getDepPkgs().map((pkg) => pkg.name);
+    const filteredPkgNames: string[] = pkgNames.filter((pkgName) =>
+      FILTERED_DEPENDENCY_PREFIX.some((prefix) => pkgName.startsWith(prefix)),
+    );
+    expect(filteredPkgNames).toEqual([]);
+  });
+
   it.each([
     {
       description: 'net472 - with package.assets.json',