fix: problem with gradle version resolution

Signed-off-by: Chao Wang <chaowan@redhat.com>

Author: soul2zimate

src/main/java/com/redhat/exhort/providers/BaseJavaProvider.java

@@ -25,14 +25,16 @@
 import java.util.Map;
 import java.util.Objects;
 import java.util.TreeMap;
+import org.cyclonedx.model.Component;
 
 public abstract class BaseJavaProvider extends Provider {
 
   protected BaseJavaProvider(Ecosystem.Type ecosystem, Path manifest) {
     super(ecosystem, manifest);
   }
 
-  void parseDependencyTree(String src, int srcDepth, String[] lines, Sbom sbom) {
+  void parseDependencyTree(
+      String src, int srcDepth, String[] lines, Sbom sbom, Component.Scope scope) {
     if (lines.length == 0) {
       return;
     }
@@ -47,11 +49,12 @@ void parseDependencyTree(String src, int srcDepth, String[] lines, Sbom sbom) {
         PackageURL from = parseDep(src);
         PackageURL to = parseDep(target);
         if (dependencyIsNotTestScope(from) && dependencyIsNotTestScope(to)) {
-          sbom.addDependency(from, to);
+          sbom.addDependency(from, to, scope);
         }
       } else {
         String[] modifiedLines = Arrays.copyOfRange(lines, index, lines.length);
-        parseDependencyTree(lines[index - 1], getDepth(lines[index - 1]), modifiedLines, sbom);
+        parseDependencyTree(
+            lines[index - 1], getDepth(lines[index - 1]), modifiedLines, sbom, scope);
       }
       if (index < lines.length - 1) {
         target = lines[++index];

src/main/java/com/redhat/exhort/providers/GoModulesProvider.java

@@ -300,7 +300,7 @@ private Sbom buildSbomFromGraph(
               dep -> {
                 PackageURL targetPurl =
                     toPurl((String) dep, "@", this.goEnvironmentVariableForPurl);
-                sbom.addDependency(source, targetPurl);
+                sbom.addDependency(source, targetPurl, null);
               });
         });
     List<String> ignoredDepsPurl =
@@ -433,7 +433,7 @@ private Sbom buildSbomFromList(String golangDeps, List<PackageURL> ignoredDeps)
         dep -> {
           PackageURL targetPurl = toPurl(dep, "@", this.goEnvironmentVariableForPurl);
           if (dependencyNotToBeIgnored(ignoredDeps, targetPurl)) {
-            sbom.addDependency(root, targetPurl);
+            sbom.addDependency(root, targetPurl, null);
           }
         });
     List<String> ignoredDepsByName = new ArrayList<>();