diff --git a/pkg/sbom/generator/spdx/spdx.go b/pkg/sbom/generator/spdx/spdx.go index baea159a9..84f549e1e 100644 --- a/pkg/sbom/generator/spdx/spdx.go +++ b/pkg/sbom/generator/spdx/spdx.go @@ -322,12 +322,12 @@ func copySBOMElements(sourceDoc, targetDoc *Document, todo map[string]struct{}, done[f.ID] = struct{}{} + f.Name = strings.TrimPrefix(f.Name, "/") // Strip leading slashes, which SPDX doesn't like. + if _, ok := ownedFiles[f.Name]; !ok { continue } - f.Name = strings.TrimPrefix(f.Name, "/") // Strip leading slashes, which SPDX doesn't like. - targetDoc.Files = append(targetDoc.Files, f) }