Merge pull request #412 from nsacyber/issue/411

[#411] Changed assumption regarding Delta cert components with ADDED status
This commit is contained in:
iadgovuser26 2021-10-28 10:02:05 -04:00 committed by GitHub
commit 5434fe8ca7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -655,13 +655,7 @@ public final class SupplyChainCredentialValidator implements CredentialValidator
.getValue());
if (classFound) {
if (isMatch(ciV2, baseCiV2)) {
if (ciV2.isAdded()) {
// error
resultMessage.append("ADDED attempted with prior instance\n");
deltaSb.append(String.format("%s;", ci.hashCode()));
break;
}
if (ciV2.isModified()) {
if (ciV2.isAdded() || ciV2.isModified()) {
// since the base list doesn't have this ci
// just add the delta
baseCompList.add(deltaCi);