-
Couldn't load subscription status.
- Fork 701
Description
What would you like to be added:
Syft's cyclonedx output was improved in anchore/syft#710.
I would like Grype to offer the same level of detail as Syft.
Why is this needed:
The current cyclonedx or vex outputs don't contain full information to aid in triage. I need to cross-reference grype cyclonedx against syft json to find additional metadata (e.g. file path containing a go module, which syft encodes as properties).
Additional context:
Syft component encoding:
https://github.com/anchore/syft/blob/main/syft/formats/common/cyclonedxhelpers/component.go#L30
Grype:
https://github.com/anchore/grype/blob/main/grype/presenter/cyclonedx/document.go#L48
https://github.com/anchore/grype/blob/main/grype/presenter/cyclonedxvex/document.go#L67
Metadata
Metadata
Assignees
Labels
Type
Projects
Status