CM-55551 CLI SCA Scan Fails to Detect Indirect Dependencies Due to PNPM Lock File Handling

morsa4406 · morsa4406 · commit 865be0a317ad · 2025-11-23T14:58:24.000+02:00
diff --git a/cycode/cli/files_collector/sca/base_restore_dependencies.py b/cycode/cli/files_collector/sca/base_restore_dependencies.py
@@ -55,7 +55,7 @@ def get_manifest_file_path(self, document: Document) -> str:
             join_paths(get_path_from_context(self.ctx), document.path) if self.ctx.obj.get('monitor') else document.path
         )
 
-    def try_restore_dependencies(self, document: Document) -> Optional[Document]:
+    def try_restore_dependencies(self, document: Document) -> Optional[Document]: 
         manifest_file_path = self.get_manifest_file_path(document)
         restore_file_path = build_dep_tree_path(document.absolute_path, self.get_lock_file_name())
         relative_restore_file_path = build_dep_tree_path(document.path, self.get_lock_file_name())

Original file line number	Diff line number	Diff line change
`@@ -55,7 +55,7 @@ def get_manifest_file_path(self, document: Document) -> str:`
`55`	`55`	`join_paths(get_path_from_context(self.ctx), document.path) if self.ctx.obj.get('monitor') else document.path`
`56`	`56`	`)`
`57`	`57`
`58`		`- def try_restore_dependencies(self, document: Document) -> Optional[Document]:`
	`58`	`+ def try_restore_dependencies(self, document: Document) -> Optional[Document]:`
`59`	`59`	`manifest_file_path = self.get_manifest_file_path(document)`
`60`	`60`	`restore_file_path = build_dep_tree_path(document.absolute_path, self.get_lock_file_name())`
`61`	`61`	`relative_restore_file_path = build_dep_tree_path(document.path, self.get_lock_file_name())`