Commit graph

2 commits

Author SHA1 Message Date
Christopher Angelo Phillips
a62a3a413e
feat: swap custom cyclone-dx model for cyclone-dx library (#1038)
grype currently produces CYCLONE-DX SBOM that are not compliant with the cyclone-dx tooling libraries. Rather than write the logic in two places, this PR moves grype to use syft's formatting functions as a library to produce valid CYCLONE-DX SBOM components along with the discovered vulnerabilities.

For more context on impacted issues:
https://github.com/anchore/grype/issues/796
https://github.com/anchore/grype/issues/951
2022-12-22 16:35:09 +00:00
Alfredo Deza
57d777cf04 tests: add cyclonedx schema check
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-09-21 11:17:51 -04:00