grype

mirror of https://github.com/anchore/grype synced 2024-11-10 14:44:12 +00:00

feat: swap custom cyclone-dx model for cyclone-dx library (#1038) grype currently produces CYCLONE-DX SBOM that are not compliant with the cyclone-dx tooling libraries. Rather than write the logic in two places, this PR moves grype to use syft's formatting functions as a library to produce valid CYCLONE-DX SBOM components along with the discovered vulnerabilities. For more context on impacted issues: https://github.com/anchore/grype/issues/796 https://github.com/anchore/grype/issues/951 2022-12-22 16:35:09 +00:00			`bom.xml`
			`bom.json`