Update parser.py

DefectDojo · Dec 21, 2024 · 7a935fe · 7a935fe
1 parent df287f7
commit 7a935fe
Showing 1 changed file with 44 additions and 48 deletions.
diff --git a/dojo/tools/mend/parser.py b/dojo/tools/mend/parser.py
@@ -40,54 +40,50 @@ def _build_common_output(node, lib_name=None):
             cvss3_score = None
             mitigation = "N/A"
             locations = []
-            if "component" in node:
-                # Iterate over all findingInfo nodes and process each ACTIVE status
-                for finding_info in node.get("findingInfo", []):
-                    if finding_info.get("status") == "ACTIVE":
-                        description = (
-                            "**Vulnerability Description**: "
-                            + node["vulnerability"].get("description", "No Description Available")
-                            + "\n\n"
-                            + "**Component Name**: "
-                            + node["component"].get("name", "")
-                            + "\n"
-                            + "**Component Type**: "
-                            + node["component"].get("componentType", "")
-                            + "\n"
-                            + "**Root Library**: "
-                            + str(node["component"].get("rootLibrary", ""))
-                            + "\n"
-                            + "**Library Type**: "
-                            + node["component"].get("libraryType", "")
-                            + "\n"
-                        )
-                        lib_name = node["component"].get("name")
-                        component_name = node["component"].get("artifactId")
-                        component_version = node["component"].get("version")
-                        impact = (
-                            "**Direct or Transitive Vulnerability**: "
-                            + node["component"].get("dependencyType", "")
-                            + "\n"
-                        )
-                        cvss3_score = node["vulnerability"].get("score", None)
-                        component_path = node["component"].get("path", None)
-                        if component_path:
-                            locations.append(component_path)
-
-                        if "topFix" in node:
-                            try:
-                                topfix_node = node.get("topFix")
-                                mitigation = (
-                                    "**Resolution**: "
-                                    + topfix_node.get("date", "")
-                                    + "\n"
-                                    + topfix_node.get("message", "")
-                                    + "\n"
-                                    + topfix_node.get("fixResolution", "")
-                                    + "\n"
-                                )
-                            except Exception:
-                                logger.exception("Error handling topFix node.")
+            if "component" in node and if finding_info.get("status") == "ACTIVE":
+                description = (
+                    "**Vulnerability Description**: "
+                    + node["vulnerability"].get("description", "No Description Available")
+                    + "\n\n"
+                    + "**Component Name**: "
+                    + node["component"].get("name", "")
+                    + "\n"
+                    + "**Component Type**: "
+                    + node["component"].get("componentType", "")
+                    + "\n"
+                    + "**Root Library**: "
+                    + str(node["component"].get("rootLibrary", ""))
+                    + "\n"
+                    + "**Library Type**: "
+                    + node["component"].get("libraryType", "")
+                    + "\n"
+                    )
+                    lib_name = node["component"].get("name")
+                    component_name = node["component"].get("artifactId")
+                    component_version = node["component"].get("version")
+                    impact = (
+                        "**Direct or Transitive Vulnerability**: "
+                        + node["component"].get("dependencyType", "")
+                        + "\n"
+                    )
+                    cvss3_score = node["vulnerability"].get("score", None)
+                    component_path = node["component"].get("path", None)
+                    if component_path:
+                        locations.append(component_path)
+                     if "topFix" in node:
+                        try:
+                            topfix_node = node.get("topFix")
+                            mitigation = (
+                                "**Resolution**: "
+                                + topfix_node.get("date", "")
+                                + "\n"
+                                + topfix_node.get("message", "")
+                                + "\n"
+                                + topfix_node.get("fixResolution", "")
+                                + "\n"
+                            )
+                        except Exception:
+                            logger.exception("Error handling topFix node.")
             elif "library" in node:
                 node.get("project")
                 description = (