grype/schema/cyclonedx
Alex Goodman d8aedf8117 use test config for schema validations
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-05-26 12:30:21 -04:00
..
.gitignore tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
bd.xsd tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
cyclonedx.xsd tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
Makefile use test config for schema validations 2021-05-26 12:30:21 -04:00
README.md tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
spdx.xsd tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
vulnerability.xsd tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00

CycloneDX Schemas

grype generates a CycloneDX BOm output with the vulnerability extension. This validation is similar to what is done in syft, validating output against CycloneDX schemas.

Validation is done with xmllint, which requires a copy of all schemas because it can't work with HTTP references. The schemas are modified to reference local copies of dependent schemas.