remove other relationship from syft generated rpm sboms

RedHatProductSecurity · Oct 9, 2024 · 153cb16 · 153cb16
1 parent 97c6339
commit 153cb16
Show file tree

Hide file tree

Showing 3 changed files with 3,315 additions and 15,079 deletions.
diff --git a/sbom/examples/rpm/build/from-koji.py b/sbom/examples/rpm/build/from-koji.py
@@ -123,7 +123,15 @@ def run_syft(builddir):
             relationship["spdxElementId"] = "SPDXRef-Source0"  # pick first one
             relationship["relationshipType"] = "CONTAINS"
 
-    relationships.extend(syft_rels)
+    filtered_rels = []
+    for relationship in syft_rels:
+        if not (
+            relationship["relationshipType"] == "OTHER"
+            and relationship["comment"].startswith("evident-by:")
+        ):
+            filtered_rels.append(relationship)
+
+    relationships.extend(filtered_rels)
 
 
 def mock_openssl_midstream(sfn, source, sname, sver):