fix(dotnet): correct inverted dependency-of relationship direction in packages.lock.json parser (#5143)

Fixes #5125

Signed-off-by: Pujitha Paladugu <10557236+pujitha24@users.noreply.github.com>
Co-authored-by: Pujitha Paladugu <10557236+pujitha24@users.noreply.github.com>

syft/pkg/cataloger/dotnet/parse_packages_lock.go

@@ -101,8 +101,8 @@ func parseDotnetPackagesLock(_ context.Context, _ file.Resolver, _ *generic.Envi
 			}
 
 			rel := artifact.Relationship{
-				From: parentPkg,
+				From: childPkg,
-				To:   childPkg,
+				To:   parentPkg,
 				Type: artifact.DependencyOfRelationship,
 			}
 			relationships = append(relationships, rel)

syft/pkg/cataloger/dotnet/parse_packages_lock_test.go

@@ -169,28 +169,28 @@ func TestParseDotnetPackagesLock(t *testing.T) {
 
 	expectedRelationships := []artifact.Relationship{
 		{
-			From: autoMapperPkg,
+			From: extensionOptionsPkg,
+			To:   autoMapperPkg,
+			Type: artifact.DependencyOfRelationship,
+		},
+		{
+			From: dependencyInjectionAbstractionsPkg,
 			To:   extensionOptionsPkg,
 			Type: artifact.DependencyOfRelationship,
 		},
-		{
-			From: extensionOptionsPkg,
-			To:   dependencyInjectionAbstractionsPkg,
-			Type: artifact.DependencyOfRelationship,
-		},
-		{
-			From: extensionOptionsPkg,
-			To:   extensionPrimitivesPkg,
-			Type: artifact.DependencyOfRelationship,
-		},
 		{
 			From: extensionPrimitivesPkg,
-			To:   compilerServicesUnsafePkg,
+			To:   extensionOptionsPkg,
 			Type: artifact.DependencyOfRelationship,
 		},
 		{
-			From: microsoftLoggingPkg,
+			From: compilerServicesUnsafePkg,
-			To:   extensionOptionsPkg,
+			To:   extensionPrimitivesPkg,
+			Type: artifact.DependencyOfRelationship,
+		},
+		{
+			From: extensionOptionsPkg,
+			To:   microsoftLoggingPkg,
 			Type: artifact.DependencyOfRelationship,
 		},
 	}