syft/schema/cyclonedx
Alex Goodman 87cd6c8c48
update spdx license list to 3.23 (#2818)
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
2024-04-26 14:50:55 +00:00
..
.gitignore add cyclone-json output format (#635) 2021-12-03 17:06:23 -08:00
cyclonedx.json Split the sbom.Format interface by encode and decode use cases (#2186) 2023-10-25 13:43:06 +00:00
cyclonedx.xsd Split the sbom.Format interface by encode and decode use cases (#2186) 2023-10-25 13:43:06 +00:00
Makefile Split the sbom.Format interface by encode and decode use cases (#2186) 2023-10-25 13:43:06 +00:00
README.md Split the sbom.Format interface by encode and decode use cases (#2186) 2023-10-25 13:43:06 +00:00
spdx.xsd update spdx license list to 3.23 (#2818) 2024-04-26 14:50:55 +00:00

CycloneDX Schemas

syft generates a CycloneDX Bom output. We want to be able to validate the CycloneDX schemas (and dependent schemas) against generated syft output. The best way to do this is with xmllint, however, this tool does not know how to deal with references from HTTP, only the local filesystem. For this reason we've included a copy of all schemas needed to validate syft output, modified to reference local copies of dependent schemas.

You can get the latest schemas from the CycloneDX specifications repo.