Update based on code review

Signed-off-by: nathannaveen <[email protected]>
guacsec · May 1, 2024 · 5a0516e · 5a0516e
1 parent a06a21f
commit 5a0516e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pkg/ingestor/parser/cyclonedx/parser_cyclonedx.go b/pkg/ingestor/parser/cyclonedx/parser_cyclonedx.go
@@ -506,6 +506,7 @@ func (c *cyclonedxParser) findCDXPkgVersionIDs(ctx context.Context, pkgIdentifie
 	var pkgVersions []string
 	for _, depPkgVersion := range pkgResponse.Packages[0].Namespaces[0].Names[0].Versions {
 		pkgVersions = append(pkgVersions, depPkgVersion.Version)
+		// TODO (nathannaveen): use depPkgVersion.Purl instead of creating a new purl.
 		pkgVersionsMap[depPkgVersion.Version] = guacCDXPkgPurl(typeGUAC, depPkgVersion.Version, "", false)
 	}