Added comment

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>
CycloneDX · May 1, 2024 · 4124e2f · 4124e2f
1 parent 1c304f7
commit 4124e2f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/main/java/org/cyclonedx/maven/DefaultModelConverter.java b/src/main/java/org/cyclonedx/maven/DefaultModelConverter.java
@@ -218,6 +218,7 @@ private static void addComponentEvidence(final Component component, final Artifa
             final String jarPath = artifact.getFile().getAbsolutePath();
             final String sha1Path = jarPath.replace(".jar", ".jar.sha1");
             if (jarPath.contains(".m2")) {
+                // This removes the home directory which might be sensitive
                 fileMethod.setValue(Paths.get(".m2", jarPath.split(".m2")[1]).toString());
             } else {
                 fileMethod.setValue(jarPath);