feat: generate json-schema for -o json#3269
Conversation
Signed-off-by: axel7083 <42176370+axel7083@users.noreply.github.com>
| ) | ||
|
|
||
| const ( | ||
| DocumentSchemaVersion = "1.0.0" |
There was a problem hiding this comment.
This should definitely not be 1.0
There was a problem hiding this comment.
As this seems for the other json-schemas to be unrelated to the version of grype, and seems to increase when the schema changes, what would be the expected initial value?
E.g. version for the dbsearch schema
There was a problem hiding this comment.
Sorry I started typing something else up and got sidetracked... we are definitely going to be iterating on this model as we work towards 1.0. We will probably what we did with Syft and have a legacy schema for pre-1.0 Grype, essentially the one that we have today. It's a great question what that number should be! I would think 0.9 indicates it's close to 1.0, but I think it is going to change significantly (e.g. possibly have matches only with references to packages and vulns). Maybe a 0.5 is something that indicates "significantly before 1.0". I'll bring this question to the team...
There was a problem hiding this comment.
Thanks for the details, keep me updated so I can update the PR!
Fixes #214