fix: check if PURL is nil

Signed-off-by: knqyf263 <knqyf263@gmail.com>
aquasecurity · Oct 2, 2024 · 9c26be0 · 9c26be0
1 parent 9ed5d88
commit 9c26be0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/fanal/applier/docker.go b/pkg/fanal/applier/docker.go
@@ -220,7 +220,7 @@ func ApplyLayers(layers []ftypes.BlobInfo) ftypes.ArtifactDetail {
 			mergedLayer.Packages[i].InstalledFiles = installedFiles
 		}
 
-		if mergedLayer.OS.Family != "" {
+		if mergedLayer.OS.Family != "" && pkg.Identifier.PURL == nil {
 			mergedLayer.Packages[i].Identifier.PURL = newPURL(mergedLayer.OS.Family, types.Metadata{OS: &mergedLayer.OS}, pkg)
 		}
 		mergedLayer.Packages[i].Identifier.UID = dependency.UID("", pkg)