guac
guac copied to clipboard
[bug] Update known query command to search for Sbom from package.
Describe the bug If there's a digest for the subject in an SBOM, we attach the HasSbom node to the Artifact that matches that digest. After that, we link the Artifact to a Package using IsOccurrence. Currently, the known query command needs to be updated to check for isOccurance linking package to the artifact and to see if it have an hasSBOM.