oss/syft

mirror of https://github.com/anchore/syft.git synced 2025-11-17 16:33:21 +01:00

History

update spdx license list to 3.23 (#2818 )

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

2024-04-26 14:50:55 +00:00

.gitignore

add cyclone-json output format (#635 )

2021-12-03 17:06:23 -08:00

cyclonedx.json

Split the sbom.Format interface by encode and decode use cases (#2186 )

2023-10-25 13:43:06 +00:00

cyclonedx.xsd

Split the sbom.Format interface by encode and decode use cases (#2186 )

2023-10-25 13:43:06 +00:00

Makefile

Split the sbom.Format interface by encode and decode use cases (#2186 )

2023-10-25 13:43:06 +00:00

README.md

Split the sbom.Format interface by encode and decode use cases (#2186 )

2023-10-25 13:43:06 +00:00

spdx.xsd

update spdx license list to 3.23 (#2818 )

2024-04-26 14:50:55 +00:00

README.md

CycloneDX Schemas

syft generates a CycloneDX Bom output. We want to be able to validate the CycloneDX schemas (and dependent schemas) against generated syft output. The best way to do this is with xmllint, however, this tool does not know how to deal with references from HTTP, only the local filesystem. For this reason we've included a copy of all schemas needed to validate syft output, modified to reference local copies of dependent schemas.

You can get the latest schemas from the CycloneDX specifications repo.