Keith Zantow

I think there's some misunderstanding about what the `--output` flag currently does, which may be confusing and we may want to revisit... but `--output` allows you to specify multiple instances...

FYI -- we are actively discussing this and for anyone interested it would be a great topic for the next community meeting, which will be Sep. 1 at 12 noon...

@Dentrax we are actively working on this, it's a complicated change and will need to get support implemented in Grype, too before we get everything merged 👍

I believe this may have been fixed when https://github.com/anchore/syft/issues/845 was implemented -- note: this requires running an `npm install` or similar, so `package.json` files are present in `node_modules`. Does this...

Hi @tafli #466 has been fixed, has that resolved this issue too? If not, could you provide some more information, possibly with links to example `.jar` files we could use...

We have been discussing some changes that would probably be required to get this PR to the finish line. We would love some community feedback, as we will probably discuss...

Adding a little bit from a discussion today: I wonder if this would be better in a DAG style format to enable more/different nodes and potentially make certain things more...

@esaruoho there would be a migration so existing patches sound the same, just with the updated behavior

baconpaul [3:50 PM] Thinking about a patch randomizer some. That’s a tricky feature with surge I think. Not impossible but subtle. There’s an old ticket from feb with someone suggesting...

I'm closing this issue as it is no longer pertinent -- this action is a wrapper for Grype, and as such does not integrate with Anchore enterprise.