ChrisJr404andChris 4312699dd6 cyclonedx: import firmware-typed components as packages (#4855) ...

The CycloneDX decoder was filtering on a hard-coded set of component
types (application/framework/library/machine-learning-model). Anything
else — including "firmware" — fell through silently, so a BOM
describing u-boot or other firmware ended up with no packages and
grype reported no matches (anchore/grype#2537).

@kzantow confirmed in the issue thread that firmware should be
included and gave this section as the spot to update.

Add ComponentTypeFirmware to the case list and a regression test that
constructs a single-firmware-component BOM and asserts the decoded
SBOM contains the package.

Closes anchore/grype#2537

Signed-off-by: Chris (ChrisJr404) <11917633+ChrisJr404@users.noreply.github.com>
Co-authored-by: Chris (ChrisJr404) <11917633+ChrisJr404@users.noreply.github.com>

2026-07-13 19:33:51 +00:00

..

helpers

cyclonedx: import firmware-typed components as packages (#4855)

2026-07-13 19:33:51 +00:00

decoder_test.go

Split the sbom.Format interface by encode and decode use cases (#2186)

2023-10-25 13:43:06 +00:00

decoder.go

feat: Add PURL list input/output format (#3853)

2025-05-12 13:33:24 -04:00

encoder.go

fix: support CycloneDX 1.7 (#4967)

2026-06-11 09:40:42 -04:00

versions_test.go

fix: support CycloneDX 1.7 (#4967)

2026-06-11 09:40:42 -04:00

versions.go

fix: support CycloneDX 1.7 (#4967)

2026-06-11 09:40:42 -04:00