Alex Goodman

Results 406 comments of Alex Goodman

This is proposing a little more than a rename -- this is introducing new states. I'm trying to understand how a user would use the information of `incompleteMixed`/`incompleteDirectOnly`? I feel...

This is needed for https://github.com/anchore/grype/pull/2110

[This came up in the original PR](https://github.com/anchore/syft/pull/1696#discussion_r1156260070)s, but there is a technical limitation: the `FilesByGlob` only raises up files, not directories. But directory names is what is being searched for...

You're right from the perspective of the package cataloger, which is critical for many use cases. But there is already an analysis done for executables: ``` $ syft ./Slack.app -o...

It looks like part of the problem is that we have a jvm cataloger and still have binary classifiers for java/jdk... doesn't mean that we remove one or the other...

Just to be clear, the problem is: ``` "cpe": "cpe:2.3:a:oracle:jdk:1.8.0_452-b09:*:*:*:*:*:*:*", ``` should be ``` "cpe": "cpe:2.3:a:oracle:openjdk:1.8.0:update452:*:*:*:*:*:*", ``` or very similar (note the suffix).