diff --git a/src/main/java/io/github/guacsec/trustifyda/providers/CargoProvider.java b/src/main/java/io/github/guacsec/trustifyda/providers/CargoProvider.java index 31abb43c..01e4867f 100644 --- a/src/main/java/io/github/guacsec/trustifyda/providers/CargoProvider.java +++ b/src/main/java/io/github/guacsec/trustifyda/providers/CargoProvider.java @@ -441,7 +441,13 @@ private void processDirectDependencies( } private boolean shouldSkipDependency(CargoDep dep, Set ignoredDeps) { - if (ignoredDeps.contains(dep.name())) { + // dep.name() returns the crate name (may have underscores) + String crateName = dep.name(); + if (ignoredDeps.contains(crateName)) { + return true; + } + String packageNameFormat = crateName.replace('_', '-'); + if (!crateName.equals(packageNameFormat) && ignoredDeps.contains(packageNameFormat)) { return true; }