use %s for sql params

Signed-off-by: Steve Taylor <[email protected]>
ortelius · Mar 22, 2023 · 7dac168 · 7dac168
1 parent c66646e
commit 7dac168
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main.py b/main.py
@@ -234,7 +234,7 @@ def saveComponentsData(response, compid, bomformat, components_data):
                     # insert into database
                     sqlstmt = """
                         INSERT INTO dm_componentdeps(compid, packagename, packageversion, deptype, name, url, summary, purl, pkgtype)
-                        VALUES {} ON CONFLICT ON CONSTRAINT dm_componentdeps_pkey DO NOTHING
+                        VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s) ON CONFLICT ON CONSTRAINT dm_componentdeps_pkey DO NOTHING
                     """
 
                     cursor.executemany(sqlstmt, components_data)