diff --git a/sonar-cryptography-plugin/src/main/java/com/ibm/plugin/OutputFileJob.java b/sonar-cryptography-plugin/src/main/java/com/ibm/plugin/OutputFileJob.java index ba8eaa1d..4e3c79b4 100644 --- a/sonar-cryptography-plugin/src/main/java/com/ibm/plugin/OutputFileJob.java +++ b/sonar-cryptography-plugin/src/main/java/com/ibm/plugin/OutputFileJob.java @@ -43,6 +43,11 @@ public void execute(PostJobContext postJobContext) { .get(Constants.CBOM_OUTPUT_NAME) .orElse(Constants.CBOM_OUTPUT_NAME_DEFAULT); ScannerManager scannerManager = new ScannerManager(new CBOMOutputFileFactory()); + if (!scannerManager.hasResults()) { + LOGGER.info("No cryptography assets were detected. CBOM will not be generated."); + scannerManager.reset(); + return; + } final File cbom = new File(cbomFilename + ".json"); scannerManager.getOutputFile().saveTo(cbom); LOGGER.info("CBOM was successfully generated '{}'.", cbom.getAbsolutePath());