fix panic

scribe-security · May 1, 2023 · 653499f · 653499f
1 parent f650933
commit 653499f
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/syft/formats/common/cyclonedxhelpers/decoder.go b/syft/formats/common/cyclonedxhelpers/decoder.go
@@ -25,7 +25,9 @@ func GetValidator(format cyclonedx.BOMFileFormat) sbom.Validator {
 			return err
 		}
 
-		if bom.Components != nil {
+		if bom.Components != nil &&
+			bom.Metadata != nil &&
+			bom.Metadata.Component != nil {
 			components := *bom.Components
 			components = append(components, *bom.Metadata.Component)
 			bom.Components = &components
@@ -48,7 +50,9 @@ func GetDecoder(format cyclonedx.BOMFileFormat) sbom.Decoder {
 		if err != nil {
 			return nil, err
 		}
-		if bom.Components != nil {
+		if bom.Components != nil &&
+			bom.Metadata != nil &&
+			bom.Metadata.Component != nil {
 			components := *bom.Components
 			components = append(components, *bom.Metadata.Component)
 			bom.Components = &components