From 2d119388fbf5e298d91f9c3f5b6e8a61d5386aa4 Mon Sep 17 00:00:00 2001
From: Dar Malovani <dar@snyk.io>
Date: Tue, 25 Aug 2020 14:06:02 +0300
Subject: [PATCH] fix: check if scanned project does have a callgraph

When running with `snyk test --reachable --all-projects`
and one of the projects is not supported for reachable vulns
i.e. not maven, we are failing.

This change makes sure that the project does have a
call graph.
---
 src/lib/snyk-test/run-test.ts | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/src/lib/snyk-test/run-test.ts b/src/lib/snyk-test/run-test.ts
index 0db0c4b8b71..9255bb93b55 100644
--- a/src/lib/snyk-test/run-test.ts
+++ b/src/lib/snyk-test/run-test.ts
@@ -533,10 +533,7 @@ async function assembleLocalPayloads(
         body.depGraph = depGraph;
       }
 
-      if (
-        options.reachableVulns &&
-        (scannedProject.callGraph as CallGraphError).message
-      ) {
+      if (options.reachableVulns && scannedProject.callGraph?.message) {
         const err = scannedProject.callGraph as CallGraphError;
         const analyticsError = err.innerError || err;
         analytics.add('callGraphError', {