mirror of
https://github.com/anchore/syft
synced 2024-09-20 14:11:54 +00:00
b7a6d5e946
Syft can get CPEs from several source, including generating them based on package data, finding them in the NVD CPE dictionary, or finding them declared in a manifest or existing SBOM. Record where Syft got CPEs so that consumers of SBOMs can reason about how trustworthy they are. Signed-off-by: Will Murphy <will.murphy@anchore.com>
7 lines
292 B
Go
7 lines
292 B
Go
package internal
|
|
|
|
const (
|
|
// JSONSchemaVersion is the current schema version output by the JSON encoder
|
|
// This is roughly following the "SchemaVer" guidelines for versioning the JSON schema. Please see schema/json/README.md for details on how to increment.
|
|
JSONSchemaVersion = "16.0.0"
|
|
)
|