Alex Goodman

I think one of the next steps of this project is to re-base a lot of the underlying functionality on the anchore/stereoscope lib, which also has an issue to add...

Note: this is partially addressed in https://github.com/wagoodman/dive/pull/399

actually, I'd like to rebase dive to use anchore/stereoscope instead, which uses google/go-containerregistry under the hood, but also has many of the filetree objects and layer reasoning needed to drive...

Fixed in https://github.com/wagoodman/dive/pull/399

It looks like now there is a snapcraft package https://snapcraft.io/dive , so I'm going to consider this completed

In cases where there is a multi-stage build this could be useful: ``` FROM fedora:latest as fedora # get some packages... RUN dnf install ... FROM ubuntu:latest as ubuntu #...

@houdini91 I'm going to close this PR since we have another PR that hooks into the new API proposed in #558 (#1383). The new PR lacks some features from this...

@matthyx I'm not certain in the specific case you brought up that there is enough information from syft's perspective to know that these are two different redis packages. That is,...

Popping off the stack some, ideally syft does persist all information found for packages discovered. However, that goal might not be mutually exclusive to merging packages together (slightly different than...

I'm starting to see the case for why a binary package in particular should probably not be included if there is an owning package... since the "binary packages" were entirely...