You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Look at exactly what what fields Syft and Grype output
PR to the CycloneDX docs, making a file called syft.md and grype.md as siblings of this file. (Note that Syft and Grype are doing different things, and need to be documented separately.)
What would you like to be added:
Their is a registered/reserved CycloneDX Property Taxonomy Top-Level Namespace
grype
. https://github.com/CycloneDX/cyclonedx-property-taxonomy/blob/ed8a972a5e1c925bba05f8865c1ad3219b872c98/README.md?plain=1#L99C4-L99C9I would love to see a documentation of the CycloneDX property taxonomy used by
grype
.Maybe I just missed it?
Why is this needed:
If
grype
used custom CycloneDX properties, it would help to know then, and understand when they should be used and what they mean.Additional context:
I am not certain whether the TL-Namespace
grype
is used at all.Ifnot, it might even help to publish an "empty" docs space like so https://github.com/DependencyTrack/cyclonedx-property-taxonomy
The text was updated successfully, but these errors were encountered: