Will Murphy

@wagoodman I think it might be worth trying to make this data driven, what do you think? ``` sql select * from operating_systems where codename like "buster"; ``` | id...

The matcher should attempt to resolve the distro using the database. If we have a string like "buster" and it's not in the db as a name or id, we...

Some investigation steps to move this along: 1. Find some .NET images 2. See if there are `.nuspec` files in them, and whether we can parse them to get better...

Hi @100tomer I have not made any progress here. If you wanted to investigate along the steps proposed above and report back, that would be awesome! Also, I believe there...

Related: https://github.com/anchore/grype/issues/1378

Some other examples might be: ``` grype sbom-dir:/path/to/many/sboms ``` or just allow sbom to be passed more than once: ``` grype *.sbom.json ``` or maybe a k8s manifest: ``` grype...

Added 'needs-discussion' since there's obviously interest in this, and if we do something like this we'd like to stabilize it before Grype 1.0, since adding it later is likely a...

We discussed this at a [recent livestream](https://anchorecommunity.discourse.group/t/october-23-open-source-gardening-live-stream/577?u=willmurphy). I've added `needs-proposal` because we need to understand what the output should look like and what the input should look like. Input welcome!...

There's a little prototype code for this up at https://github.com/quay/goval-parser/compare/master...willmurphyscode:goval-parser:prototype-oval-subset-cli?expand=1

I'm putting this down right now. We need to move some of our providers from OVAL XML to CSAF JSON, and the tooling I started for this centers around OVAL...