Remove empty package_urls

Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>

Author: TG1999

vulnerabilities/pipelines/v2_improvers/group_advisories_for_packages.py

@@ -17,6 +17,7 @@ class GroupAdvisoriesForPackages(VulnerableCodePipeline):
     """Group advisories for packages that have multiple importers"""
 
     pipeline_id = "group_advisories_for_packages"
+    run_once = True
 
     @classmethod
     def steps(cls):

vulnerabilities/utils.py

@@ -883,8 +883,12 @@ def compute_advisory_content_hash(adv, package):
     )
 
     for impact in adv.impacted_packages.filter(base_purl=str(version_less_purl)):
-        affected.extend([pkg.package_url for pkg in impact.affecting_packages.all()])
-        fixed.extend([pkg.package_url for pkg in impact.fixed_by_packages.all()])
+        for pkg in impact.affecting_packages.all():
+            if pkg.package_url:
+                affected.extend([pkg.package_url])
+        for pkg in impact.fixed_by_packages.all():
+            if pkg.package_url:
+                fixed.extend([pkg.package_url])
 
     normalized_data = {
         "affected_packages": normalize_list(affected),