Alex Goodman

@juliosueiras I've tried pushing to your PR without luck, I get `rejected` on the CLI. I think this is some behavior between `gh pr checkout...` and the branch name having...

> From your checkout, can you try pushing with git push [email protected]:juliosueiras-nix/syft.git HEAD:refs/heads/feature/nix-cataloger (or add the juliosueiras as a remote and then push to the remote name)? I tried both...

I think the next best option is to change the branch target from `main` to a feature branch in this repo. I can merge this as-is to the feature branch,...

FYI, I've merged this into a new in-repo branch `add-nix-cataloger`. I'll try to get this over the finish line. When this lands in the release notes I'll update it manually...

quick update: the above PR has been merged into the in-repo feature branch `add-nix-cataloger` for further development (see https://github.com/anchore/syft/pull/1107#issuecomment-1483306556). Tip-of-the-hat to @juliosueiras for the original implementation, I'll see what I...

I'm going to mark this as stale, but feel free to open up a new issue if you wanted to talk about this further!

I think there is a path forward on this one. We would need to create a new image-based FileResolver that would act a little like the squashed resolver and the...

This has effectively been implemented and turned on by default in https://github.com/anchore/syft/pull/1383. Specifically, in the `files` section of the SBOM we now catalog file metadata and digests for all files...

I got a little ahead of myself on claiming a victory here. Though the above comment is true, what is missing is tying this back to what SPDX can express...

I feel this can manifest a few different ways, but I want to put forth my take on how this could be expressed. The odd thing about this kind of...