Track git packages

Signed-off-by: Prabhu Subramanian <[email protected]>

lib/helpers/utils.js

@@ -2060,6 +2060,8 @@ export async function parsePnpmLock(
   const workspacePackageNames = {};
   // Track references to packages that are directly installed from github.com
   const gitPkgRefs = {};
+  // pnpm could refer to packages from git sources
+  const githubServerHost = process.env.CDXGEN_GIT_HOST || "github.com";
   // Convert workspace package names to an object to help with the lookup
   for (const w of workspacePackages || []) {
     workspacePackageNames[w] = true;
@@ -2234,12 +2236,12 @@ export async function parsePnpmLock(
           let group = "";
           let version;
           const versionObj = componentDeps[cdk];
-          if (versionObj?.version?.startsWith("github.com")) {
+          if (versionObj?.version?.startsWith(githubServerHost)) {
             const parts = versionObj.version.split("/");
             version = parts.pop();
             name = parts.pop();
             group = parts.pop();
-            if (group === "github.com") {
+            if (group === githubServerHost) {
               group = "";
             } else {
               group = `@${group}`;
@@ -2439,7 +2441,7 @@ export async function parsePnpmLock(
             name = gitPkgRefs[fullName].name;
             group = gitPkgRefs[fullName].group;
             version = gitPkgRefs[fullName].version;
-          } else if (parts?.length >= 3 && parts[0] === "github.com") {
+          } else if (parts?.length >= 3 && parts[0] === githubServerHost) {
             version = parts[parts.length - 1];
             name = parts[parts.length - 2];
             group = parts.length === 4 ? `@${parts[parts.length - 3]}` : "";