The dependencies for the parent component can (apparently) be undefin…

…ed... Signed-off-by: Roland Asmann <roland.asmann@gmail.com>
CycloneDX · Jan 16, 2025 · 5528d1e · 5528d1e
1 parent f92d595
commit 5528d1e
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/lib/cli/index.js b/lib/cli/index.js
@@ -6514,9 +6514,15 @@ export async function createMultiXBom(pathList, options) {
       "dependsOn" === process.env.MULTI_BOM_COMPONENT_REF
         ? "dependsOn"
         : "provides";
-    const parentDependencies = dependencies.find(
+    let parentDependencies = dependencies.find(
       (d) => d["ref"] === parentComponent["bom-ref"],
     );
+    if (!parentDependencies) {
+      parentDependencies = {
+        ref: parentComponent["bom-ref"],
+      };
+      dependencies = mergeDependencies(dependencies, parentDependencies);
+    }
     if (!parentDependencies[multiBomComponentRef]) {
       parentDependencies[multiBomComponentRef] = [];
     }