Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: support cyclic dependencies #157

Merged
merged 1 commit into from
Sep 18, 2023

Conversation

ruromero
Copy link
Collaborator

@ruromero ruromero commented Sep 15, 2023

fix #153

For CycloneDX it's just a matter of stopping the recursive function when the cyclic dependency is detected.
However for SPDX, the root node does not point to the direct dependencies so it is not possible to draw a reliable graph in that case as there are multiple alternatives. In that case it will be better to throw a validation error.

Signed-off-by: Ruben Romero Montes <[email protected]>
@zvigrinberg
Copy link
Contributor

lgtm
Tested OK on 2 sboms containing cyclic dependencies.

@zvigrinberg zvigrinberg merged commit 9686735 into RHEcosystemAppEng:stable Sep 18, 2023
5 of 7 checks passed
@ruromero ruromero deleted the cyclic branch September 18, 2023 11:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants