in src/main/java/com/amazon/inspector/jenkins/amazoninspectorbuildstep/csvconversion/CsvConverter.java [151:167]
public void routeVulnerabilities() {
List<Vulnerability> vulnerabilities = sbomData.getSbom().getVulnerabilities();
if (vulnerabilities == null) {
return;
}
for (Vulnerability vulnerability : vulnerabilities) {
for (Affect componentRef : vulnerability.getAffects()) {
Component comp = componentMap.get(componentRef.getRef());
if (comp != null) {
routeDockerCsvData(vulnerability, comp);
routeVulnCsvData(vulnerability, comp);
}
}
}
}