github.com/noqcks/syft@v0.0.0-20230920222752-a9e2c4e288e5/schema/cyclonedx/README.md (about)

     1  # CycloneDX Schemas
     2  
     3  `syft` generates a CycloneDX Bom output. We want to be able to validate the CycloneDX schemas
     4  (and dependent schemas) against generated syft output. The best way to do this is with `xmllint`,
     5  however, this tool does not know how to deal with references from HTTP, only the local filesystem.
     6  For this reason we've included a copy of all schemas needed to validate `syft` output, modified
     7  to reference local copies of dependent schemas.