From 3ef48e09054cac04a235fa92dfda34b6c1b0832c Mon Sep 17 00:00:00 2001 From: Christoph Reiter Date: Fri, 21 Feb 2025 07:06:28 +0100 Subject: [PATCH] sbom: lowercase CPEs before comparing with grype again grype seems to lowercase CPEs in the the output SBOM, so lowercase both source and target when comparing. --- msys2_devtools/sbom.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/msys2_devtools/sbom.py b/msys2_devtools/sbom.py index 3b9d53c..ae8c5fc 100644 --- a/msys2_devtools/sbom.py +++ b/msys2_devtools/sbom.py @@ -223,7 +223,7 @@ def handle_merge_command(args) -> None: def get_component_key(component: Component) -> str: cpe_key = None if component.cpe is not None: - cpe_key = parse_cpe(component.cpe) + cpe_key = parse_cpe(component.cpe.lower()) return (component.name, component.version, component.purl, cpe_key) for component in src_bom.components: