v15

Complete reference for Syft JSON schema version 15.0.0

Document

Field Name	Type
`artifacts`	`Array<Package>`
`artifactRelationships`	`Array<Relationship>`
`files`	`Array<File>`
`source`	`Source`
`distro`	`LinuxRelease`
`descriptor`	`Descriptor`
`schema`	`Schema`

Core Types

`ClassifierMatch`

Field Name	Type
`classifier`	`str`
`location`	`Location`

`Coordinates`

Field Name	Type
`path`	`str`
`layerID`	`str`

`Descriptor`

Field Name	Type
`name`	`str`
`version`	`str`

`Digest`

Field Name	Type
`algorithm`	`str`
`value`	`str`

`File`

Field Name	Type
`id`	`str`
`location`	`Coordinates`
`metadata`	`FileMetadataEntry`
`contents`	`str`
`digests`	`Array<Digest>`
`licenses`	`Array<FileLicense>`

`FileLicense`

Field Name	Type
`value`	`str`
`spdxExpression`	`str`
`type`	`str`
`evidence`	`FileLicenseEvidence`

`FileLicenseEvidence`

Field Name	Type
`confidence`	`int`
`offset`	`int`
`extent`	`int`

`FileMetadataEntry`

Field Name	Type
`mode`	`int`
`type`	`str`
`linkDestination`	`str`
`userID`	`int`
`groupID`	`int`
`mimeType`	`str`
`size`	`int`

`KeyValue`

Field Name	Type
`key`	`str`
`value`	`str`

`License`

Field Name	Type
`value`	`str`
`spdxExpression`	`str`
`type`	`str`
`urls`	`Array<str>`
`locations`	`Array<Location>`

`LinuxKernelModuleParameter`

Field Name	Type
`type`	`str`
`description`	`str`

`LinuxRelease`

Field Name	Type
`prettyName`	`str`
`name`	`str`
`id`	`str`
`idLike`	`IDLikes`
`version`	`str`
`versionID`	`str`
`versionCodename`	`str`
`buildID`	`str`
`imageID`	`str`
`imageVersion`	`str`
`variant`	`str`
`variantID`	`str`
`homeURL`	`str`
`supportURL`	`str`
`bugReportURL`	`str`
`privacyPolicyURL`	`str`
`cpeName`	`str`
`supportEnd`	`str`

`Location`

Field Name	Type
`path`	`str`
`layerID`	`str`
`accessPath`	`str`
`annotations`	`obj`

`Package`

Field Name	Type
`id`	`str`
`name`	`str`
`version`	`str`
`type`	`str`
`foundBy`	`str`
`locations`	`Array<Location>`
`licenses`	`licenses`
`language`	`str`
`cpes`	`Array<str>`
`purl`	`str`
`metadataType`	`str`
`metadata`	see the Ecosystem Specific Types section

`Relationship`

Field Name	Type
`parent`	`str`
`child`	`str`
`type`	`str`

`Schema`

Field Name	Type
`version`	`str`
`url`	`str`

`Source`

Field Name	Type
`id`	`str`
`name`	`str`
`version`	`str`
`type`	`str`

Ecosystem Specific Types

`AlpmDbEntry`

Field Name	Type
`basepackage`	`str`
`package`	`str`
`version`	`str`
`description`	`str`
`architecture`	`str`
`size`	`int`
`packager`	`str`
`url`	`str`
`validation`	`str`
`reason`	`int`
`files`	`Array<AlpmFileRecord>`
`backup`	`Array<AlpmFileRecord>`

`AlpmFileRecord`

Field Name	Type
`path`	`str`
`type`	`str`
`uid`	`str`
`gid`	`str`
`time`	`str`
`size`	`str`
`link`	`str`
`digest`	`Array<Digest>`

`ApkDbEntry`

Field Name	Type
`package`	`str`
`originPackage`	`str`
`maintainer`	`str`
`version`	`str`
`architecture`	`str`
`url`	`str`
`description`	`str`
`size`	`int`
`installedSize`	`int`
`pullDependencies`	`Array<str>`
`provides`	`Array<str>`
`pullChecksum`	`str`
`gitCommitOfApkPort`	`str`
`files`	`Array<ApkFileRecord>`

`ApkFileRecord`

Field Name	Type
`path`	`str`
`ownerUid`	`str`
`ownerGid`	`str`
`permissions`	`str`
`digest`	`Digest`

`BinarySignature`

Field Name	Type
`matches`	`Array<ClassifierMatch>`

`CConanFileEntry`

Field Name	Type
`ref`	`str`

`CConanInfoEntry`

Field Name	Type
`ref`	`str`
`package_id`	`str`

`CConanLockEntry`

Field Name	Type
`ref`	`str`
`package_id`	`str`
`prev`	`str`
`requires`	`Array<str>`
`build_requires`	`Array<str>`
`py_requires`	`Array<str>`
`options`	`KeyValues`
`path`	`str`
`context`	`str`

`CocoaPodfileLockEntry`

Field Name	Type
`checksum`	`str`

`DartPubspecLockEntry`

Field Name	Type
`name`	`str`
`version`	`str`
`hosted_url`	`str`
`vcs_url`	`str`

`DotnetDepsEntry`

Field Name	Type
`name`	`str`
`version`	`str`
`path`	`str`
`sha512`	`str`
`hashPath`	`str`

`DotnetPortableExecutableEntry`

Field Name	Type
`assemblyVersion`	`str`
`legalCopyright`	`str`
`comments`	`str`
`internalName`	`str`
`companyName`	`str`
`productName`	`str`
`productVersion`	`str`

`DpkgDbEntry`

Field Name	Type
`package`	`str`
`source`	`str`
`version`	`str`
`sourceVersion`	`str`
`architecture`	`str`
`maintainer`	`str`
`installedSize`	`int`
`provides`	`Array<str>`
`depends`	`Array<str>`
`preDepends`	`Array<str>`
`files`	`Array<DpkgFileRecord>`

`DpkgFileRecord`

Field Name	Type
`path`	`str`
`digest`	`Digest`
`isConfigFile`	`bool`

`ElixirMixLockEntry`

Field Name	Type
`name`	`str`
`version`	`str`
`pkgHash`	`str`
`pkgHashExt`	`str`

`ErlangRebarLockEntry`

Field Name	Type
`name`	`str`
`version`	`str`
`pkgHash`	`str`
`pkgHashExt`	`str`

`GoModuleBuildinfoEntry`

Field Name	Type
`goBuildSettings`	`KeyValues`
`goCompiledVersion`	`str`
`architecture`	`str`
`h1Digest`	`str`
`mainModule`	`str`
`goCryptoSettings`	`Array<str>`

`GoModuleEntry`

Field Name	Type
`h1Digest`	`str`

`HaskellHackageStackEntry`

Field Name	Type
`pkgHash`	`str`

`HaskellHackageStackLockEntry`

Field Name	Type
`pkgHash`	`str`
`snapshotURL`	`str`

`JavaArchive`

Field Name	Type
`virtualPath`	`str`
`manifest`	`JavaManifest`
`pomProperties`	`JavaPomProperties`
`pomProject`	`JavaPomProject`
`digest`	`Array<Digest>`

`JavaManifest`

Field Name	Type
`main`	`KeyValues`
`sections`	`Array<KeyValues>`

`JavaPomParent`

Field Name	Type
`groupId`	`str`
`artifactId`	`str`
`version`	`str`

`JavaPomProject`

Field Name	Type
`path`	`str`
`parent`	`JavaPomParent`
`groupId`	`str`
`artifactId`	`str`
`version`	`str`
`name`	`str`
`description`	`str`
`url`	`str`

`JavaPomProperties`

Field Name	Type
`path`	`str`
`name`	`str`
`groupId`	`str`
`artifactId`	`str`
`version`	`str`
`scope`	`str`
`extraFields`	`obj`

`JavascriptNpmPackage`

Field Name	Type
`name`	`str`
`version`	`str`
`author`	`str`
`homepage`	`str`
`description`	`str`
`url`	`str`
`private`	`bool`

`JavascriptNpmPackageLockEntry`

Field Name	Type
`resolved`	`str`
`integrity`	`str`

`LinuxKernelArchive`

Field Name	Type
`name`	`str`
`architecture`	`str`
`version`	`str`
`extendedVersion`	`str`
`buildTime`	`str`
`author`	`str`
`format`	`str`
`rwRootFS`	`bool`
`swapDevice`	`int`
`rootDevice`	`int`
`videoMode`	`str`

`LinuxKernelModule`

Field Name	Type
`name`	`str`
`version`	`str`
`sourceVersion`	`str`
`path`	`str`
`description`	`str`
`author`	`str`
`license`	`str`
`kernelVersion`	`str`
`versionMagic`	`str`
`parameters`	`obj`

`NixStoreEntry`

Field Name	Type
`outputHash`	`str`
`output`	`str`
`files`	`Array<str>`

`PhpComposerInstalledEntry`

Field Name	Type
`name`	`str`
`version`	`str`
`source`	`PhpComposerExternalReference`
`dist`	`PhpComposerExternalReference`
`require`	`obj`
`provide`	`obj`
`require-dev`	`obj`
`suggest`	`obj`
`license`	`Array<str>`
`type`	`str`
`notification-url`	`str`
`bin`	`Array<str>`
`authors`	`Array<PhpComposerAuthors>`
`description`	`str`
`homepage`	`str`
`keywords`	`Array<str>`
`time`	`str`

`PhpComposerAuthors`

Field Name	Type
`name`	`str`
`email`	`str`
`homepage`	`str`

`PhpComposerExternalReference`

Field Name	Type
`type`	`str`
`url`	`str`
`reference`	`str`
`shasum`	`str`

`PhpComposerLockEntry`

Field Name	Type
`name`	`str`
`version`	`str`
`source`	`PhpComposerExternalReference`
`dist`	`PhpComposerExternalReference`
`require`	`obj`
`provide`	`obj`
`require-dev`	`obj`
`suggest`	`obj`
`license`	`Array<str>`
`type`	`str`
`notification-url`	`str`
`bin`	`Array<str>`
`authors`	`Array<PhpComposerAuthors>`
`description`	`str`
`homepage`	`str`
`keywords`	`Array<str>`
`time`	`str`

`PhpComposerAuthors`

Field Name	Type
`name`	`str`
`email`	`str`
`homepage`	`str`

`PhpComposerExternalReference`

Field Name	Type
`type`	`str`
`url`	`str`
`reference`	`str`
`shasum`	`str`

`PortageDbEntry`

Field Name	Type
`installedSize`	`int`
`files`	`Array<PortageFileRecord>`

`PortageFileRecord`

Field Name	Type
`path`	`str`
`digest`	`Digest`

`PythonPackage`

Field Name	Type
`name`	`str`
`version`	`str`
`author`	`str`
`authorEmail`	`str`
`platform`	`str`
`files`	`Array<PythonFileRecord>`
`sitePackagesRootPath`	`str`
`topLevelPackages`	`Array<str>`
`directUrlOrigin`	`PythonDirectURLOriginInfo`

`PythonDirectURLOriginInfo`

Field Name	Type
`url`	`str`
`commitId`	`str`
`vcs`	`str`

`PythonFileDigest`

Field Name	Type
`algorithm`	`str`
`value`	`str`

`PythonFileRecord`

Field Name	Type
`path`	`str`
`digest`	`PythonFileDigest`
`size`	`str`

`PythonPipRequirementsEntry`

Field Name	Type
`name`	`str`
`extras`	`Array<str>`
`versionConstraint`	`str`
`url`	`str`
`markers`	`str`

`PythonPipfileLockEntry`

Field Name	Type
`hashes`	`Array<str>`
`index`	`str`

`RDescription`

Field Name	Type
`title`	`str`
`description`	`str`
`author`	`str`
`maintainer`	`str`
`url`	`Array<str>`
`repository`	`str`
`built`	`str`
`needsCompilation`	`bool`
`imports`	`Array<str>`
`depends`	`Array<str>`
`suggests`	`Array<str>`

`RpmArchive`

Field Name	Type
`name`	`str`
`version`	`str`
`epoch`	`int \| null`
`architecture`	`str`
`release`	`str`
`sourceRpm`	`str`
`size`	`int`
`vendor`	`str`
`modularityLabel`	`str`
`files`	`Array<RpmFileRecord>`

`RpmFileRecord`

Field Name	Type
`path`	`str`
`mode`	`int`
`size`	`int`
`digest`	`Digest`
`userName`	`str`
`groupName`	`str`
`flags`	`str`

`RpmDbEntry`

Field Name	Type
`name`	`str`
`version`	`str`
`epoch`	`int \| null`
`architecture`	`str`
`release`	`str`
`sourceRpm`	`str`
`size`	`int`
`vendor`	`str`
`modularityLabel`	`str`
`files`	`Array<RpmFileRecord>`

`RpmFileRecord`

Field Name	Type
`path`	`str`
`mode`	`int`
`size`	`int`
`digest`	`Digest`
`userName`	`str`
`groupName`	`str`
`flags`	`str`

`RubyGemspec`

Field Name	Type
`name`	`str`
`version`	`str`
`files`	`Array<str>`
`authors`	`Array<str>`
`homepage`	`str`

`RustCargoAuditEntry`

Field Name	Type
`name`	`str`
`version`	`str`
`source`	`str`

`RustCargoLockEntry`

Field Name	Type
`name`	`str`
`version`	`str`
`source`	`str`
`checksum`	`str`
`dependencies`	`Array<str>`

`SwiftPackageManagerLockEntry`

Field Name	Type
`revision`	`str`

Last modified October 23, 2025: fix section ref (9417a27)