fix: now depends on source code repo being skipped as well

Signed-off-by: Carl Flottmann <carl.flottmann@oracle.com>

Author: art1f1c3R

src/macaron/malware_analyzer/pypi_heuristics/sourcecode/pypi_sourcecode_analyzer.py

@@ -53,7 +53,13 @@ def __init__(self, resources_path: str | None = None) -> None:
         super().__init__(
             name="suspicious_patterns_analyzer",
             heuristic=Heuristics.SUSPICIOUS_PATTERNS,
-            depends_on=[(Heuristics.SOURCE_CODE_REPO, HeuristicResult.FAIL)],
+            # We include the SKIP condition here as we want to consider the case where EMPTY_PROJECT_LINK fails,
+            # meaning SOURCE_CODE_REPO is skipped, as this is still a scenario where the source code repository
+            # is not available, so we want to run source code analysis.
+            depends_on=[
+                (Heuristics.SOURCE_CODE_REPO, HeuristicResult.FAIL),
+                (Heuristics.SOURCE_CODE_REPO, HeuristicResult.SKIP),
+            ],
         )
         if resources_path is None:
             resources_path = global_config.resources_path