Removed the ability to configure ref and hard-coded it with 'dependsOn'

Signed-off-by: Roland Asmann <roland.asmann@gmail.com>
CycloneDX · Jan 17, 2025 · 2c2c934 · 2c2c934
1 parent 97da21f
commit 2c2c934
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 10 deletions.
diff --git a/docs/ENV.md b/docs/ENV.md
@@ -6,7 +6,6 @@ The following environment variables are available to configure the bom generatio
 | ------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | CDXGEN_DEBUG_MODE                           | Set to `debug` to enable debug messages                                                                                                                                                                                                                                                                                             |
 | GITHUB_TOKEN                                | Specify GitHub token to prevent traffic shaping while querying license and repo information                                                                                                                                                                                                                                         |
-| MULTI_BOM_COMPONENT_REF                     | When building a multi-language BOM, choose how the references between the components is handled. This can be useful if other tooling used to eg visualize the dependency-tree only uses 'dependsOn' (as the name dependency-tree more or less implies). Possible values: `dependsOn`, `provides`. Default: `dependesOn`.              |
 | MVN_CMD                                     | Set to override maven command                                                                                                                                                                                                                                                                                                       |
 | MVN_ARGS                                    | Set to pass additional arguments such as profile or settings to maven                                                                                                                                                                                                                                                               |
 | MAVEN_HOME                                  | Specify maven home                                                                                                                                                                                                                                                                                                                  |

diff --git a/lib/cli/index.js b/lib/cli/index.js
@@ -6506,12 +6506,6 @@ export async function createMultiXBom(pathList, options) {
       delete parentComponent.components;
     }
     // Add references between the multiple sub-boms
-    // Default is 'provides', but since some tools only generate a tree for 'dependsOn',
-    // this can be configured with an EnvVar
-    const multiBomComponentRef =
-      "provides" === process.env.MULTI_BOM_COMPONENT_REF
-        ? "provides"
-        : "dependsOn";
     let parentDependencies = dependencies.find(
       (d) => d["ref"] === parentComponent["bom-ref"],
     );
@@ -6521,11 +6515,11 @@ export async function createMultiXBom(pathList, options) {
       };
       dependencies = mergeDependencies(dependencies, parentDependencies);
     }
-    if (!parentDependencies[multiBomComponentRef]) {
-      parentDependencies[multiBomComponentRef] = [];
+    if (!parentDependencies["dependsOn"]) {
+      parentDependencies["dependsOn"] = [];
     }
     for (const parentSub of parentSubComponents) {
-      parentDependencies[multiBomComponentRef].push(parentSub["bom-ref"]);
+      parentDependencies["dependsOn"].push(parentSub["bom-ref"]);
     }
   }
   // some cleanup, but not complete