From 173aa5c78fc9c6c564f3f5188c3cc5a4f21e2873 Mon Sep 17 00:00:00 2001 From: Ritesh Noronha Date: Wed, 24 Apr 2024 10:57:17 -0700 Subject: [PATCH] Change from package originator to verifier presense --- pkg/sbom/spdx.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/pkg/sbom/spdx.go b/pkg/sbom/spdx.go index a10eb04..f6bd917 100644 --- a/pkg/sbom/spdx.go +++ b/pkg/sbom/spdx.go @@ -189,7 +189,8 @@ func (s *spdxDoc) parseComps() { nc.supplier = *supp } nc.supplierName = s.addSupplierName(index) - if sc.PackageOriginator != nil { + + if sc.PackageVerificationCode != nil { nc.sourceCodeHash = sc.PackageVerificationCode.Value }