attempt to fix conditional logic for only getting ACTIVE findingInfo …

…status
DefectDojo · Dec 21, 2024 · 5ad78cb · 5ad78cb
1 parent d4196e9
commit 5ad78cb
Showing 1 changed file with 45 additions and 44 deletions.
diff --git a/dojo/tools/mend/parser.py b/dojo/tools/mend/parser.py
@@ -40,50 +40,51 @@ def _build_common_output(node, lib_name=None):
             cvss3_score = None
             mitigation = "N/A"
             locations = []
-            if "component" in node and node.get("findingInfo", {}).get("status") == "ACTIVE":
-                description = (
-                    "**Vulnerability Description**: "
-                    + node["vulnerability"].get("description", "No Description Available")
-                    + "\n\n"
-                    + "**Component Name**: "
-                    + node["component"].get("name", "")
-                    + "\n"
-                    + "**Component Type**: "
-                    + node["component"].get("componentType", "")
-                    + "\n"
-                    + "**Root Library**: "
-                    + str(node["component"].get("rootLibrary", ""))
-                    + "\n"
-                    + "**Library Type**: "
-                    + node["component"].get("libraryType", "")
-                    + "\n"
-                )
-                lib_name = node["component"].get("name")
-                component_name = node["component"].get("artifactId")
-                component_version = node["component"].get("version")
-                impact = (
-                    "**Direct or Transitive Vulnerability**: "
-                    + node["component"].get("dependencyType", "")
-                    + "\n"
-                )
-                cvss3_score = node["vulnerability"].get("score", None)
-                component_path = node["component"].get("path", None)
-                if component_path:
-                    locations.append(component_path)
-                if "topFix" in node:
-                    try:
-                        topfix_node = node.get("topFix")
-                        mitigation = (
-                            "**Resolution**: "
-                            + topfix_node.get("date", "")
-                            + "\n"
-                            + topfix_node.get("message", "")
-                            + "\n"
-                            + topfix_node.get("fixResolution", "")
-                            + "\n"
-                        )
-                    except Exception:
-                        logger.exception("Error handling topFix node.")
+            if "component" in node:
+                if node.get("findingInfo", {}).get("status") == "ACTIVE":
+                    description = (
+                        "**Vulnerability Description**: "
+                        + node["vulnerability"].get("description", "No Description Available")
+                        + "\n\n"
+                        + "**Component Name**: "
+                        + node["component"].get("name", "")
+                        + "\n"
+                        + "**Component Type**: "
+                        + node["component"].get("componentType", "")
+                        + "\n"
+                        + "**Root Library**: "
+                        + str(node["component"].get("rootLibrary", ""))
+                        + "\n"
+                        + "**Library Type**: "
+                        + node["component"].get("libraryType", "")
+                        + "\n"
+                    )
+                    lib_name = node["component"].get("name")
+                    component_name = node["component"].get("artifactId")
+                    component_version = node["component"].get("version")
+                    impact = (
+                        "**Direct or Transitive Vulnerability**: "
+                        + node["component"].get("dependencyType", "")
+                        + "\n"
+                    )
+                    cvss3_score = node["vulnerability"].get("score", None)
+                    component_path = node["component"].get("path", None)
+                    if component_path:
+                        locations.append(component_path)
+                    if "topFix" in node:
+                        try:
+                            topfix_node = node.get("topFix")
+                            mitigation = (
+                                "**Resolution**: "
+                                + topfix_node.get("date", "")
+                                + "\n"
+                                + topfix_node.get("message", "")
+                                + "\n"
+                                + topfix_node.get("fixResolution", "")
+                                + "\n"
+                            )
+                        except Exception:
+                            logger.exception("Error handling topFix node.")
             elif "library" in node:
                 node.get("project")
                 description = (