feat(sca): Using alias data from assets.json for giving Package Used …

…indication for aliased packages (#5808) use the aliases Co-authored-by: ipeleg <[email protected]>
bridgecrewio · Nov 29, 2023 · a0b9c94 · a0b9c94
1 parent 58e5098
commit a0b9c94
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/checkov/common/bridgecrew/integration_features/features/vulnerabilities_integration.py b/checkov/common/bridgecrew/integration_features/features/vulnerabilities_integration.py
@@ -126,6 +126,11 @@ def create_file_by_package_map(self, filtered_entries: List[Tuple[Any, Any]]) ->
         for code_file_path, sast_data in filtered_entries:
             for package_name in sast_data['all']:
                 clean_package_name = package_name.strip("'")
+
+                # in case it is alias-name, getting the real one
+                if package_name in sast_data.get('aliases', {}):
+                    clean_package_name = sast_data['aliases'][package_name]
+
                 # Normalize package name
                 normalize_package_name = self.normalize_package_name(clean_package_name)