Update dependency_scanner.py

vmware · Feb 18, 2025 · 877fa6f · 877fa6f
1 parent eb3fcf7
commit 877fa6f
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/scripts/dependency_scanner.py b/scripts/dependency_scanner.py
@@ -245,6 +245,14 @@ def generate_csv_report(self, filename=None):
                             current_version = self.client.get_dependency_version(repo['owner'], repo['name'], manifest_path)
                             # --- END CORRECTED VERSION RETRIEVAL ---
 
+                            # --- CORRECTED VULNERABLE RANGE LOGIC ---
+                            security_advisory = alert.get("security_advisory", {})
+                            vulnerable_ranges = []
+                            for vulnerability in security_advisory.get("vulnerabilities", []):
+                                vulnerable_ranges.append(vulnerability.get("vulnerable_version_range", "N/A"))
+                            vulnerable_range = ", ".join(vulnerable_ranges)  # Join multiple ranges
+                            # --- END CORRECTED VULNERABLE RANGE LOGIC ---
+
                             security_advisory = alert.get("security_advisory", {})
                             vulnerable_range = security_advisory.get("vulnerable_version_range", "N/A")
                             severity = security_advisory.get("severity", "N/A")