eBay / sbom-scorecard

Generate a score for your sbom to understand if it will actually be useful.
Apache License 2.0
221 stars 24 forks source link

Handle panic when handling non 2.2 SPDX docs #12

Closed puerco closed 1 year ago

puerco commented 1 year ago

This PR fixes a bug to avoid a panic when opening SPDX documents which are not version 2.2.

/cc @justinabrahms

Signed-off-by: Adolfo García Veytia (Puerco) puerco@chainguard.dev