fix: unset component tags for spec version less than 1.6 (#253)

Co-authored-by: Alistair McLean <alistair.mclean@netrise.io>

Author: alistair-mclean

convert.go

@@ -159,6 +159,7 @@ func componentConverter(specVersion SpecVersion) func(*Component) {
 			c.OmniborID = nil
 			c.Manufacturer = nil
 			c.Authors = nil
+			c.Tags = nil
 		}
 
 		if !specVersion.supportsComponentType(c.Type) {

convert_test.go

@@ -245,3 +245,26 @@ func Test_convertAuthors(t *testing.T) {
 		assert.Nil(t, (*bom.Components)[0].Authors)
 	})
 }
+
+func Test_convertTags(t *testing.T) {
+	t.Run("spec 1.5 and lower", func(t *testing.T) {
+		bom := NewBOM()
+		bom.Metadata = &Metadata{
+			Component: &Component{
+				Name: "test",
+				Tags: &[]string{"tag1", "tag2"},
+			},
+		}
+		bom.Components = &[]Component{
+			{
+				Name: "foo",
+				Tags: &[]string{"tag3", "tag4"},
+			},
+		}
+
+		bom.convert(SpecVersion1_5)
+
+		assert.Nil(t, bom.Metadata.Component.Tags)
+		assert.Nil(t, (*bom.Components)[0].Tags)
+	})
+}