syft/internal/formats/syftjson/model/document.go

package model

// Document represents the syft cataloging findings as a JSON document
type Document struct {
	Artifacts             []Package      `json:"artifacts"` // Artifacts is the list of packages discovered and placed into the catalog
	ArtifactRelationships []Relationship `json:"artifactRelationships"`
	Source                Source         `json:"source"`     // Source represents the original object that was cataloged
	Distro                Distro         `json:"distro"`     // Distro represents the Linux distribution that was detected from the source
	Descriptor            Descriptor     `json:"descriptor"` // Descriptor is a block containing self-describing information about syft
	Schema                Schema         `json:"schema"`     // Schema is a block reserved for defining the version for the shape of this JSON document and where to find the schema document to validate the shape
}

// Descriptor describes what created the document as well as surrounding metadata
type Descriptor struct {
	Name          string      `json:"name"`
	Version       string      `json:"version"`
	Configuration interface{} `json:"configuration,omitempty"`
}

type Schema struct {
	Version string `json:"version"`
	URL     string `json:"url"`
}