Fix: NullPointerException on Commercial Average Scorecard (#268)

plugin/src/main/java/org/owasp/benchmarkutils/score/BenchmarkScore.java

@@ -962,7 +962,7 @@ private static void generateVulnerabilityScorecards(
                                         + commercialAveragesTable.filename());
                 // Resources in a jar file have to be loaded as streams. Not directly as Files.
                 InputStream vulnTemplateStream =
-                        CL.getResourceAsStream(scoreCardDir + "/commercialAveTemplate.html");
+                        CL.getResourceAsStream(SCORECARDDIRNAME + "/commercialAveTemplate.html");
                 String html = IOUtils.toString(vulnTemplateStream, StandardCharsets.UTF_8);
                 html = html.replace("${testsuite}", BenchmarkScore.TESTSUITENAME.fullName());
                 html = html.replace("${version}", TESTSUITEVERSION);

plugin/src/test/java/org/owasp/benchmarkutils/score/BenchmarkScoreTest.java

@@ -18,9 +18,11 @@
 package org.owasp.benchmarkutils.score;
 
 import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
 import static org.junit.jupiter.api.Assertions.assertThrows;
 
 import java.io.ByteArrayOutputStream;
+import java.io.InputStream;
 import java.io.PrintStream;
 import org.junit.jupiter.api.AfterEach;
 import org.junit.jupiter.api.BeforeEach;
@@ -109,4 +111,16 @@ void throwsExceptionAndInformsAboutUsageOnTwoElementsArraySecondNull() {
 
         expectUsageMessage();
     }
+
+    @Test
+    void commercialAveTemplateResolvesViaClasspathConstant() {
+        String resourcePath =
+                BenchmarkScore.SCORECARDDIRNAME + "/commercialAveTemplate.html";
+        InputStream stream =
+                BenchmarkScore.class.getClassLoader().getResourceAsStream(resourcePath);
+
+        assertNotNull(
+                stream,
+                "commercialAveTemplate.html must be loadable via SCORECARDDIRNAME classpath lookup");
+    }
 }