Maven coordinates resolved incorrectly

[bpfoster]

I have a project that (transitively) depends on org.springframework.data:spring-data-commons:jar:3.0.0.

Running trivy fs on my pom file appears to incorrectly resolve its maven coordinates:

DEBUG	Resolving org.springframework.data.build:spring-data-commons:3.0.0...
DEBUG	org.springframework.data.build:spring-data-commons:3.0.0 was not found in local/remote repositories

spring-data-commons' parent is org.springframework.data.build:spring-data-parent:3.0.0, so it appears that the logic that's applying the parent inheritance is incorrectly assigning the child groupId to the parent's groupId.

[mrjonstrong]

@bpfoster I am wondering does this relate to #157?

[bpfoster]

I'm not totally sure but that does seem like a different issue. #157 speaks to dependencies declared in parent/child poms via properties. This seems to be an issue in resolving the GAV of the pom itself in a parent/child scenario.