fix: conversion of supplier without contact list (#364)

Signed-off-by: Frank Schoenmann <[email protected]> Co-authored-by: Frank Schoenmann <[email protected]>
CycloneDX · Nov 23, 2024 · b40222a · b40222a
1 parent a40ae70
commit b40222a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/CycloneDX.Spdx.Interop/Converters/v2_2/Helpers/SpdxDocumentHelpers.cs b/src/CycloneDX.Spdx.Interop/Converters/v2_2/Helpers/SpdxDocumentHelpers.cs
@@ -152,7 +152,7 @@ public static void AddCycloneDXComponents(this SpdxDocument doc, Bom bom)
                 package.Supplier = component.Properties?.GetSpdxElement(PropertyTaxonomy.PACKAGE_SUPPLIER) ?? "NOASSERTION";
                 if (component.Supplier != null)
                 {
-                    var supplierEmails = component.Supplier.Contact.Where(c => c.Email != null).ToList();
+                    var supplierEmails = component.Supplier.Contact?.Where(c => c.Email != null).ToList() ?? new List<OrganizationalContact>();
                     var supplierEmail = supplierEmails.Count > 0 ? supplierEmails.First().Email : "";
                     if (component.Supplier.Name == component.Properties?.GetSpdxElement(PropertyTaxonomy.PACKAGE_SUPPLIER_ORGANIZATION))
                     {