# Grype and CycloneDX

**URL:** <https://anchorecommunity.discourse.group/t/grype-and-cyclonedx/86>\
**Category:** Grype\
**Created:** [August 21, 2024, 2:38pm UTC](https://anchorecommunity.discourse.group/t/grype-and-cyclonedx/86 "2024-08-21T14:38:04Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Christopher\_Powell](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/christopher_powell/32/89_2.png) [@Christopher\_Powell](https://anchorecommunity.discourse.group/u/Christopher_Powell)\
**Post date:** [August 21, 2024, 2:38pm UTC](https://anchorecommunity.discourse.group/t/grype-and-cyclonedx/86/1 "2024-08-21T14:38:04Z")

</div>

Syft has away to generate CycloneDX 1.5  
Does Grype? I do not see away in the documentation.

Thanks in advance

---

<div class="post-metadata">

**Author:** ![willmurphy](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/willmurphy/32/12_2.png) [@willmurphy](https://anchorecommunity.discourse.group/u/willmurphy)\
**Post date:** [August 28, 2024, 7:00pm UTC](https://anchorecommunity.discourse.group/t/grype-and-cyclonedx/86/2 "2024-08-28T19:00:21Z")

</div>

You can use `@1.5` on Syft, like `syft -o cyclonedx@1.5 busybox:latest` will write a cyclonedx 1.5 XML doc (use `-o cyclonedx-json@1.5` for the JSON version).

Right now Grype doesn’t support the `@` notation to specify a different version of a format, but we’d be open to adding it or accepting a contribution that adds it I believe.