Actual Outcomes

Bellow error msg thrown while running cdxgen for repository configured with rush and pnpm package manager.

Expected Outcomes

A complete SBOM report should be generated for this repository.

Additional Context

After analysing it further inside the cdxgen I found the following pieces of source code which causing issue

Actually parsePnpmLock method return JSON object instead of JSON array.

POC

To get this fixed I made the below changes inside the lib/cli/index.js and it's started working.

Though I am not sure if this is the proper fix but it solve the error. So kindly have a look and provide help.