10/14/25: PAT option parsing library update

Last updated: October 14, 2025

Overview

Panther Analysis Tool (PAT) version 1.2.0 will update the library used to parse commands and options. In this version, multi-value options no longer accept space-separated arguments. Instead, each argument must be specified with the flag individually. When you upgrade to PAT v1.2.0, please update any saved commands that use the flags below.

Examples

For example, to pass two arguments to --valid-table-names:

  • Correct: --valid-table-names table1 --valid-table-names table2

  • Incorrect: --valid-table-names table1 table2

If a multi-argument flag accepts values in the format KEY=VALUE1,VALUE2 (like --filter), each argument must be passed to the flag separately (though the argument's value can still be represented as a comma-separated array). For example:

  • Correct:  --filter AnalysisType=policy,rule --filter Severity=High

  • Incorrect: --filter AnalysisType=policy,rule Severity=High

Affected command options

All multi-argument flags are affected. These include:

  • --query-id

  • --analysis-id

  • --filter

  • --ignore-files

  • --valid-table-names

  • --test-names