CM-64214: Fall back to BOM when dependency:tree also produces no content

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: amitmoskovitz

cycode/cli/files_collector/sca/maven/restore_maven_dependencies.py

@@ -62,7 +62,9 @@ def try_restore_dependencies(self, document: Document) -> Optional[Document]:
             return None
 
         if not _has_dependency_graph(restore_dependencies_document.content):
-            return self.restore_from_secondary_command(document, manifest_file_path)
+            fallback = self.restore_from_secondary_command(document, manifest_file_path)
+            if fallback is not None and fallback.content is not None:
+                return fallback
 
         return restore_dependencies_document
 

tests/cli/files_collector/sca/test_restore_maven_dependencies.py

@@ -56,6 +56,7 @@ def test_falls_back_to_secondary_command_when_bom_has_no_dependency_graph(self)
         bom_doc = MagicMock(spec=Document)
         bom_doc.content = json.dumps({'dependencies': []})
         fallback_doc = MagicMock(spec=Document)
+        fallback_doc.content = '[INFO] com.example:root:jar:1.0\n+- io.netty:netty-all:jar:4.1.0'
 
         with (
             patch.object(instance, 'get_manifest_file_path', return_value='/project/pom.xml'),