Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Include Syft's cyclonedx component properties in Grype output #951

@cjnosal

Description

@cjnosal

What would you like to be added:
Syft's cyclonedx output was improved in anchore/syft#710.
I would like Grype to offer the same level of detail as Syft.

Why is this needed:
The current cyclonedx or vex outputs don't contain full information to aid in triage. I need to cross-reference grype cyclonedx against syft json to find additional metadata (e.g. file path containing a go module, which syft encodes as properties).

Additional context:
Syft component encoding:
https://github.com/anchore/syft/blob/main/syft/formats/common/cyclonedxhelpers/component.go#L30

Grype:
https://github.com/anchore/grype/blob/main/grype/presenter/cyclonedx/document.go#L48
https://github.com/anchore/grype/blob/main/grype/presenter/cyclonedxvex/document.go#L67

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions