sbom: don't store runtime dependencies when bottling.

In some cases this prevents `:all` bottles when the recursive
dependencies vary. This SBOM is regenerated correctly at pour time.
This commit is contained in:
Mike McQuaid 2024-08-02 11:42:35 +01:00
parent 15b6fd8de8
commit 357e70357c
No known key found for this signature in database

View File

@ -306,7 +306,7 @@ class SBOM
T::Array[T::Hash[Symbol, String]])]])
}
def full_spdx_runtime_dependencies(bottling:)
return [] if @runtime_dependencies.blank?
return [] if bottling || @runtime_dependencies.blank?
@runtime_dependencies.compact.filter_map do |dependency|
next unless dependency.present?
@ -340,10 +340,6 @@ class SBOM
},
],
}
if bottling
dependency_json.delete(:downloadLocation)
dependency_json.delete(:checksums)
end
dependency_json
end
end