docs: add a note

Signed-off-by: knqyf263 <knqyf263@gmail.com>
aquasecurity · Oct 2, 2024 · ab37b6a · ab37b6a
1 parent 9c26be0
commit ab37b6a
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/docs/docs/coverage/others/rpm.md b/docs/docs/coverage/others/rpm.md
@@ -18,9 +18,13 @@ Trivy analyzes RPM archives matching `*.rpm`.
 This feature is currently disabled by default but can be enabled with an environment variable, `TRIVY_EXPERIMENTAL_RPM_ARCHIVE`.
 
 ```shell
-TRIVY_EXPERIMENTAL_RPM_ARCHIVE=true trivy fs ./rpms -f cyclonedx -o rpms.cdx.json
+TRIVY_EXPERIMENTAL_RPM_ARCHIVE=true trivy fs ./rpms --format cyclonedx --output rpms.cdx.json
 ```
 
+!!! note
+    Currently, it works with `--format cyclonedx`, `--format spdx` or `--format spdx-json`.
+
+
 ## Vulnerability
 Since RPM files don't have OS information, you need to generate SBOM, fill in the OS information manually and then scan the SBOM for vulnerabilities.