Also check if the identifier key is set.

postmodern · postmodern · commit 90f8caa6752e · 2023-06-29T18:41:02.000-07:00
diff --git a/lib/github_advisory_sync.rb b/lib/github_advisory_sync.rb
@@ -341,7 +341,9 @@ def first_patched_versions_for(package)
       first_patched_versions = []
 
       vulnerabilities.each do |v|
-        if v['package']['name'] == package.name && v['firstPatchedVersion']
+        if v['package']['name'] == package.name &&
+           v['firstPatchedVersion'] &&
+           v['firstPatchedVersion']['identifier']
           first_patched_versions << v['firstPatchedVersion']['identifier']
         end
       end
