Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Cataloging large images is taking too long #696

@mverleun

Description

@mverleun

What happened:
When cataloging docker images using a script syft got stuck at one image and continued to consume quite a lot of CPU.
The image that caused trouble is gitlab/gitlab-ce:latest

What you expected to happen:
I would expect that syft would catalog this image as good as any other image.

How to reproduce it (as minimally and precisely as possible):
Download the image and catalog it:

docker pull gitlab/gitlab-ce:latest 
syft -vv -o json --file gitlab_gitlab-ce:latest.sbom.json gitlab/gitlab-ce:latest
...
[0000] DEBUG no new syft update available
[0000] DEBUG image: source=DockerDaemon location=gitlab/gitlab-ce:latest from-lib=stereoscope
[0083] DEBUG image metadata: digest=sha256:a2bf5ef04c22b5530d9c57aa5f20b55601c85fa2393d2d81e120d235f2a39ce4 mediaType=application/vnd.docker.distribution.manifest.v2+json tags=[gitlab/gitlab-ce:latest] from-lib=stereoscope
...
[0150] DEBUG cataloging with "apkdb-cataloger"
[0153] DEBUG discovered 0 packages
[0153] DEBUG cataloging with "go-module-binary-cataloger"
[0164] DEBUG discovered 1490 packages

<stuck here>

Anything else we need to know?:
Scanning the same image with grype goes well.

Environment:

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions