From 9ff3b9305cd751579b30f4d78cab937cca5da76d Mon Sep 17 00:00:00 2001
From: Sharang Parnerkar <30073382+mighty840@users.noreply.github.com>
Date: Tue, 12 May 2026 11:58:21 +0200
Subject: [PATCH] fix: restore syft remote license lookup env vars

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 compliance-agent/src/pipeline/sbom/syft.rs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/compliance-agent/src/pipeline/sbom/syft.rs b/compliance-agent/src/pipeline/sbom/syft.rs
index 815f397..8b686c8 100644
--- a/compliance-agent/src/pipeline/sbom/syft.rs
+++ b/compliance-agent/src/pipeline/sbom/syft.rs
@@ -10,6 +10,10 @@ pub(super) async fn run_syft(repo_path: &Path, repo_id: &str) -> Result<Vec<Sbom
         tokio::process::Command::new("syft")
             .arg(repo_path)
             .args(["-o", "cyclonedx-json"])
+            .env("SYFT_GOLANG_SEARCH_REMOTE_LICENSES", "true")
+            .env("SYFT_JAVASCRIPT_SEARCH_REMOTE_LICENSES", "true")
+            .env("SYFT_PYTHON_SEARCH_REMOTE_LICENSES", "true")
+            .env("SYFT_JAVA_USE_NETWORK", "true")
             .output(),
     )
     .await