Ensure annotations are defined before accessing it

Author: J12934

hooks/declarative-subsequent-scans/hook.ts

@@ -52,7 +52,10 @@ export function getCascadingScans(
   const cascadingRuleChain = new Set<string>();
 
   // Get the current Scan Chain (meaning which CascadingRules were used to start this scan and its parents) and convert it to a set, which makes it easier to query.
-  if (parentScan.metadata.annotations["cascading.securecodebox.io/chain"]) {
+  if (
+    parentScan.metadata.annotations &&
+    parentScan.metadata.annotations["cascading.securecodebox.io/chain"]
+  ) {
     const chainElements = parentScan.metadata.annotations[
       "cascading.securecodebox.io/chain"
     ].split(",");

hooks/declarative-subsequent-scans/scan-helpers.ts

@@ -65,7 +65,7 @@ export async function startSubsequentSecureCodeBoxScan({
 }) {
   let cascadingChain: Array<string> = [];
 
-  if (parentScan.metadata.annotations["cascading.securecodebox.io/chain"]) {
+  if (parentScan.metadata.annotations && parentScan.metadata.annotations["cascading.securecodebox.io/chain"]) {
     cascadingChain = parentScan.metadata.annotations[
       "cascading.securecodebox.io/chain"
     ].split(",");