:)

Results 113 comments of :)

I got a build going based on Comonicon. It works, but the problem is the sysimage size. It's so big that downloading it in a CI job (my main use...

Using non-incremental mode would increase the binary size. Filtering stdlibs reduced the size from 388 MB to 385 MB.

I don't think Julia is in a state to make this PR go anywhere useful. Maybe in the future the binaries can be small enough.

I have used this spec to implement https://github.com/aquasecurity/trivy/pull/5635. Without further review from the maintainers of this organization, I would just assume this spec is sufficient and use it for whatever...

Let's move the discussion to https://github.com/aquasecurity/trivy/pull/5635 Also you will need to tell me which julia project, and keep in mind you need to build trivy from source using my PR

This can be closed, we're going to combine our PRs first

This can be closed, we're going to combine our PRs first

> Can you also add tests for SPDX, CycloneDX to see how we use UUID for these formats? Yes I would like to do this. Can you help me by...

I pushed an SPDX test with Julia, though it currently does not pass because the SPDX marshaller is doing some sort of deduplication based on the package name. i.e. if...

No, I mean that in the [SPDX marshal test I added](https://github.com/aquasecurity/trivy/pull/5635/files#diff-230de04da360ce2a4123c451af35424a21008f594cc23e58265ba5d3d11eaf2d), there are two packages named `B`, one of which (the last one) gets entirely removed during marshaling. The final...