From 30b9cd0be07c8b01503a55ee4c995363c8551e97 Mon Sep 17 00:00:00 2001 From: medha-14 Date: Sun, 3 May 2026 00:25:10 +0530 Subject: [PATCH] fixed empty cbom creation Signed-off-by: medha-14 --- .../src/main/java/com/ibm/plugin/OutputFileJob.java | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/sonar-cryptography-plugin/src/main/java/com/ibm/plugin/OutputFileJob.java b/sonar-cryptography-plugin/src/main/java/com/ibm/plugin/OutputFileJob.java index ba8eaa1d..4e3c79b4 100644 --- a/sonar-cryptography-plugin/src/main/java/com/ibm/plugin/OutputFileJob.java +++ b/sonar-cryptography-plugin/src/main/java/com/ibm/plugin/OutputFileJob.java @@ -43,6 +43,11 @@ public void execute(PostJobContext postJobContext) { .get(Constants.CBOM_OUTPUT_NAME) .orElse(Constants.CBOM_OUTPUT_NAME_DEFAULT); ScannerManager scannerManager = new ScannerManager(new CBOMOutputFileFactory()); + if (!scannerManager.hasResults()) { + LOGGER.info("No cryptography assets were detected. CBOM will not be generated."); + scannerManager.reset(); + return; + } final File cbom = new File(cbomFilename + ".json"); scannerManager.getOutputFile().saveTo(cbom); LOGGER.info("CBOM was successfully generated '{}'.", cbom.getAbsolutePath());