mirror of
https://github.com/anchore/grype
synced 2024-11-10 06:34:13 +00:00
d8aedf8117
Signed-off-by: Alex Goodman <alex.goodman@anchore.com> |
||
---|---|---|
.. | ||
.gitignore | ||
bd.xsd | ||
cyclonedx.xsd | ||
Makefile | ||
README.md | ||
spdx.xsd | ||
vulnerability.xsd |
CycloneDX Schemas
grype
generates a CycloneDX BOm output with the vulnerability extension. This validation is similar to what is done in syft
, validating output against CycloneDX schemas.
Validation is done with xmllint
, which requires a copy of all schemas because it can't work with HTTP references. The schemas are modified to reference local copies of dependent schemas.