Merge pull request #150 from snyk/feature/retain-purls-in-tree-2

fix(legacy): retain purl information when converting from graph to tree

Author: mcombuechen

src/legacy/index.ts

@@ -325,6 +325,9 @@ async function buildSubtree(
   const depTree: DepTree = {};
   depTree.name = nodePkg.name;
   depTree.version = nodePkg.version;
+  if (nodePkg.purl) {
+    depTree.purl = nodePkg.purl;
+  }
   if (nodeInfo.versionProvenance) {
     depTree.versionProvenance = nodeInfo.versionProvenance;
   }

test/fixtures/gomodules-dep-tree-with-purls.json

@@ -0,0 +1,20 @@
+{
+  "name": "github.com/example/project",
+  "version": "0.0.0",
+  "packageFormatVersion": "gomodules:0.0.1",
+  "purl": "pkg:golang/github.com/example/project@0.0.0",
+  "dependencies": {
+    "github.com/aws/aws-sdk-go": {
+      "name": "github.com/aws/aws-sdk-go",
+      "version": "1.29.4",
+      "purl": "pkg:golang/github.com/aws/aws-sdk-go@v1.29.4",
+      "dependencies": {
+        "github.com/jmespath/go-jmespath": {
+          "name": "github.com/jmespath/go-jmespath",
+          "version": "0.4.0",
+          "purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0"
+        }
+      }
+    }
+  }
+}

test/legacy/to-dep-tree.test.ts

@@ -99,6 +99,12 @@ describe('dep-trees survive serialisation through dep-graphs', () => {
       pkgManagerName: 'maven',
       pkgType: 'maven',
     },
+    {
+      description: 'gomodules dep-tree with purls',
+      path: 'gomodules-dep-tree-with-purls.json',
+      pkgManagerName: 'gomodules',
+      pkgType: 'gomodules',
+    },
   ];
 
   // Recursively delete named properties and properties pointing to