mirror of
https://github.com/anchore/syft
synced 2024-11-13 23:57:07 +00:00
87cd6c8c48
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> |
||
---|---|---|
.. | ||
.gitignore | ||
cyclonedx.json | ||
cyclonedx.xsd | ||
Makefile | ||
README.md | ||
spdx.xsd |
CycloneDX Schemas
syft
generates a CycloneDX Bom output. We want to be able to validate the CycloneDX schemas
(and dependent schemas) against generated syft output. The best way to do this is with xmllint
,
however, this tool does not know how to deal with references from HTTP, only the local filesystem.
For this reason we've included a copy of all schemas needed to validate syft
output, modified
to reference local copies of dependent schemas.
You can get the latest schemas from the CycloneDX specifications repo.