Alex Goodman

It would be nice to add a "always open in same window" option like the project-manger plugin (https://github.com/danielbrodin/atom-project-manager). This may also solve your other issues regarding too many system resources...

Add RustSec DB source

4

Add the ability to match rust crates against the RustSec DB https://github.com/rustsec/advisory-db

Add package URL to the CycloneDX output

1

Today we use a UUID for the CycloneDX component ref in the XML output, however, the spec recommends using the Package URL instead. Syft already has Package URL support on...

Potentially add the DB url to the JSON descriptor block

1

When attempting to reproduce findings when given a JSON file, it could be useful if the descriptor.db block had the download URL for the DB used. Note: there is info...

Similar to https://github.com/anchore/grype/issues/356 , it would be good to get more visibility out of what kind of data was used to match against the input SBOM/image. Specifically, having the list...

Ability to summarize and alter VEX documents

1

As we start to introduce producing VEX documents https://github.com/anchore/grype/issues/591 , there are some input values which are manually curated (e.g. "affected" / "not affected", "justification", "response", etc). There are (at...

This takes several seconds to run: ``` config: # log-path: build.log max-parallel-commands: 12 event-driven: false tasks: - name: Processing parallel-tasks: - cmd: echo test - cmd: echo test - cmd:...

Allow for importing as a library

1

It could be interesting if other applications can import bashful as a library and use it instead of calling out to a binary in another shell.