Skip to content

Fix unknown licenses when using dependency aggregations

Brian Williams requested to merge bwill/fix-unknown-licenses into master

What does this MR do and why?

Fix unknown licenses when using dependency aggregations

JSONB_AGG aggregates nulls, which results in us having [null] when there are no licenses. This breaks JSON serialization as it expects an empty array when there are no licenses. This change fixes the issue by removing nulls using a FILTER statement.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

Before After
Screenshot_2024-07-01_at_11.25.37_AM Screenshot_2024-07-01_at_11.26.03_AM

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

  1. Enable the rewrite_sbom_occurrences_query feature flag
  2. Go to the group-level dependency list
  3. Empty licenses should show as "Unknown"
Edited by Brian Williams

Merge request reports