Include package name and version in security advisory comments

rhyskoedijk · Nov 4, 2024 · 5b9c218 · 5b9c218
1 parent 85f9c89
commit 5b9c218
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/task/utils/spdx/spdxPackageSecurityAdvisories.ts b/task/utils/spdx/spdxPackageSecurityAdvisories.ts
@@ -65,7 +65,7 @@ export async function spdxAddPackageSecurityAdvisoryExternalRefsAsync(
         referenceCategory: 'SECURITY',
         referenceType: 'advisory',
         referenceLocator: advisory.permalink,
-        comment: `[${advisory.severity}] ${advisory.summary}`,
+        comment: `[${advisory.severity}] ${advisory.summary}; Affects ${advisory.package.name} v${advisory.package.version}`,
       });
     }
   }