CM-55551 CLI SCA Scan Fails to Detect Indirect Dependencies Due to PNPM Lock File Handling

morsa4406 · morsa4406 · commit 9b17d7c78dba · 2025-11-23T16:14:33.000+02:00
diff --git a/cycode/cli/files_collector/sca/npm/restore_npm_dependencies.py b/cycode/cli/files_collector/sca/npm/restore_npm_dependencies.py
@@ -37,7 +37,7 @@ def get_commands(self, manifest_file_path: str) -> list[list[str]]:
         ]
 
     def get_restored_lock_file_name(self, restore_file_path: str) -> str:
-        return NPM_LOCK_FILE_NAME if restore_file_path is None else  os.path.basename(restore_file_path)
+        return NPM_LOCK_FILE_NAME if restore_file_path is None else os.path.basename(restore_file_path)
 
     def get_lock_file_name(self) -> str:
         return NPM_LOCK_FILE_NAME

Original file line number	Diff line number	Diff line change
`@@ -37,7 +37,7 @@ def get_commands(self, manifest_file_path: str) -> list[list[str]]:`
`37`	`37`	`]`
`38`	`38`
`39`	`39`	`def get_restored_lock_file_name(self, restore_file_path: str) -> str:`
`40`		`- return NPM_LOCK_FILE_NAME if restore_file_path is None else os.path.basename(restore_file_path)`
	`40`	`+ return NPM_LOCK_FILE_NAME if restore_file_path is None else os.path.basename(restore_file_path)`
`41`	`41`
`42`	`42`	`def get_lock_file_name(self) -> str:`
`43`	`43`	`return NPM_LOCK_FILE_NAME`