Mirrors/grype
2
0
Fork 0
mirror of https://github.com/anchore/grype synced 2024-11-15 08:47:11 +00:00
Code Issues Projects Releases Packages Wiki Activity
grype/schema/cyclonedx/README.md
Alfredo Deza 57d777cf04 tests: add cyclonedx schema check 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-09-21 11:17:51 -04:00

385 B
Raw Blame History

CycloneDX Schemas

grype generates a CycloneDX BOm output with the vulnerability extension. This validation is similar to what is done in syft, validating output against CycloneDX schemas.

Validation is done with xmllint, which requires a copy of all schemas because it can't work with HTTP references. The schemas are modified to reference local copies of dependent schemas.