Quickfix: add revision id to depIds for graph stitching
@@ -290,9 +290,10 @@ public class VulnerabilityCacheProcessorPlugin extends Plugin {
logger.info("Vulnerable IDs: " + vulnerableDependencies.size());
}
+ depIds.add(revision.id);
var databaseMerger = new CGMerger(depIds, dbContext, graphDao);
- var graph = databaseMerger.mergeWithCHA(revision.toString());
- if (graph == null) {
+ var graph = databaseMerger.mergeAllDeps();
+ if (graph == null || graph.numNodes() == 0) {
logger.info("Empty Graph for: " + revision.toString());
persistOutput(revision, "{}");
continue;
@@ -304,6 +305,7 @@ public class VulnerabilityCacheProcessorPlugin extends Plugin {
logger.info("Vulnerable Callables: " + vulnerableDependencies.size());
var internalCallables = kbDao.getPackageInternalCallableIDs(revision.product().toString(), revision.version.toString());
+ logger.info("Internal Callables: " + internalCallables.size());
// Find all paths between any internal node and any vulnerable node in the graph
var vulnerablePaths = new ArrayList<List<Long>>();
