fix: replace reflection with package-private test seam in CargoProvider test

Author: soul2zimate

src/main/java/io/github/guacsec/trustifyda/providers/CargoProvider.java

@@ -208,7 +208,7 @@ private void handleVirtualWorkspace(
     }
   }
 
-  private void processWorkspaceDependencies(
+  void processWorkspaceDependencies(
       Sbom sbom,
       PackageURL root,
       Map<String, CargoPackage> packageMap,

src/test/java/io/github/guacsec/trustifyda/providers/CargoProviderCargoParsingTest.java

@@ -16,6 +16,7 @@
  */
 package io.github.guacsec.trustifyda.providers;
 
+import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
 import static org.junit.jupiter.api.Assertions.assertEquals;
 import static org.junit.jupiter.api.Assertions.assertFalse;
 import static org.junit.jupiter.api.Assertions.assertNotNull;
@@ -28,13 +29,11 @@
 import io.github.guacsec.trustifyda.sbom.SbomFactory;
 import io.github.guacsec.trustifyda.tools.Ecosystem.Type;
 import java.io.IOException;
-import java.lang.reflect.InvocationTargetException;
 import java.nio.charset.StandardCharsets;
 import java.nio.file.Files;
 import java.nio.file.Path;
 import java.util.HashMap;
 import java.util.HashSet;
-import java.util.Map;
 import java.util.Set;
 import org.junit.jupiter.api.Test;
 import org.junit.jupiter.api.io.TempDir;
@@ -760,28 +759,11 @@ public void testVirtualWorkspaceWithoutWorkspaceDepsDoesNotThrowNPE(@TempDir Pat
         new PackageURL(Type.CARGO.getType(), null, "test-workspace", "1.0.0", null, null);
     sbom.addRoot(root);
 
-    // Call the private processWorkspaceDependencies via reflection
-    var method =
-        CargoProvider.class.getDeclaredMethod(
-            "processWorkspaceDependencies",
-            Sbom.class,
-            PackageURL.class,
-            Map.class,
-            Set.class,
-            TomlParseResult.class);
-    method.setAccessible(true);
-
     // This should NOT throw NPE when [workspace.dependencies] is absent
-    try {
-      method.invoke(provider, sbom, root, new HashMap<>(), new HashSet<>(), tomlResult);
-    } catch (InvocationTargetException e) {
-      if (e.getCause() instanceof NullPointerException) {
-        throw new AssertionError(
-            "processWorkspaceDependencies threw NPE when [workspace.dependencies] is absent."
-                + " The method should handle a missing workspace.dependencies table gracefully.",
-            e.getCause());
-      }
-      throw e;
-    }
+    assertDoesNotThrow(
+        () ->
+            provider.processWorkspaceDependencies(
+                sbom, root, new HashMap<>(), new HashSet<>(), tomlResult),
+        "processWorkspaceDependencies should handle missing [workspace.dependencies] gracefully");
   }
 }