grype/schema/cyclonedx
Alfredo Deza 57d777cf04 tests: add cyclonedx schema check
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-09-21 11:17:51 -04:00
..
.gitignore tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
bd.xsd tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
cyclonedx.xsd tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
Makefile tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
README.md tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
spdx.xsd tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00
vulnerability.xsd tests: add cyclonedx schema check 2020-09-21 11:17:51 -04:00

CycloneDX Schemas

grype generates a CycloneDX BOm output with the vulnerability extension. This validation is similar to what is done in syft, validating output against CycloneDX schemas.

Validation is done with xmllint, which requires a copy of all schemas because it can't work with HTTP references. The schemas are modified to reference local copies of dependent schemas.