Temp commit

Signed-off-by: Prabhu Subramanian <[email protected]>
owasp-dep-scan · Feb 4, 2024 · f2c9a75 · f2c9a75
1 parent fe63d3a
commit f2c9a75
Showing 1 changed file with 19 additions and 2 deletions.
diff --git a/blint/android.py b/blint/android.py
@@ -83,8 +83,25 @@ def collect_files_metadata(app_file):
                             "group": group,
                             "name": name,
                             "version": version_data,
-                            "srcFile": vf,
-                            "appFile": app_file,
+                            "purl": f"pkg:maven/{group}/{name}@{version_data}",
+                            "bom-ref": f"pkg:maven/{group}/{name}@{version_data}",
+                            "scope": "required",
+                            "evidence": {
+                                "identity": {
+                                    "field": "purl",
+                                    "confidence": 1,
+                                    "methods": [
+                                        {
+                                            "technique": "manifest-analysis",
+                                            "value": file_name,
+                                        }
+                                    ],
+                                }
+                            },
+                            "properties": [
+                                {"name": "internal:srcFile", "value": vf},
+                                {"name": "internal:appFile", "value": app_file},
+                            ],
                         }
                     )
     shutil.rmtree(app_temp_dir, ignore_errors=True)