Skip to content

update stereoscope to latest version#1052

Merged
spiffcs merged 1 commit into
mainfrom
stereoscope-latest
Jun 16, 2022
Merged

update stereoscope to latest version#1052
spiffcs merged 1 commit into
mainfrom
stereoscope-latest

Conversation

@spiffcs
Copy link
Copy Markdown
Contributor

@spiffcs spiffcs commented Jun 16, 2022 •
edited
Loading

Resolves: CVE-2022-31030

Signed-off-by: Christopher Phillips christopher.phillips@anchore.com

@spiffcs
update stereoscope to latest version
35bd72d 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
@spiffcs spiffcs force-pushed the stereoscope-latest branch from b6c414f to 35bd72d Compare June 16, 2022 17:56
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 16, 2022 •
edited
Loading

Benchmark Test Results

Benchmark results from the latest changes vs base branch 
name                                                       old time/op    new time/op    delta
ImagePackageCatalogers/alpmdb-cataloger-2                    11.3ms ± 2%    10.9ms ± 1%  -3.67%  (p=0.008 n=5+5)
ImagePackageCatalogers/ruby-gemspec-cataloger-2              1.27ms ± 7%    1.25ms ±10%    ~     (p=0.151 n=5+5)
ImagePackageCatalogers/python-package-cataloger-2            3.07ms ± 1%    2.99ms ± 1%  -2.89%  (p=0.008 n=5+5)
ImagePackageCatalogers/php-composer-installed-cataloger-2    1.00ms ± 0%    0.99ms ± 1%  -1.57%  (p=0.008 n=5+5)
ImagePackageCatalogers/javascript-package-cataloger-2         681µs ± 1%     671µs ± 1%  -1.42%  (p=0.032 n=5+5)
ImagePackageCatalogers/dpkgdb-cataloger-2                     818µs ± 1%     796µs ± 1%  -2.80%  (p=0.008 n=5+5)
ImagePackageCatalogers/rpmdb-cataloger-2                      790µs ± 1%     759µs ± 1%  -3.92%  (p=0.008 n=5+5)
ImagePackageCatalogers/java-cataloger-2                      13.6ms ± 2%    13.7ms ± 1%    ~     (p=0.095 n=5+5)
ImagePackageCatalogers/apkdb-cataloger-2                     1.17ms ± 2%    1.15ms ± 2%    ~     (p=0.095 n=5+5)
ImagePackageCatalogers/go-module-binary-cataloger-2          2.07µs ± 2%    2.14µs ± 3%    ~     (p=0.056 n=5+5)
ImagePackageCatalogers/dotnet-deps-cataloger-2               1.29ms ± 1%    1.24ms ± 1%  -3.93%  (p=0.008 n=5+5)

name                                                       old alloc/op   new alloc/op   delta
ImagePackageCatalogers/alpmdb-cataloger-2                    5.25MB ± 0%    5.25MB ± 0%    ~     (p=0.690 n=5+5)
ImagePackageCatalogers/ruby-gemspec-cataloger-2               193kB ± 0%     193kB ± 0%    ~     (p=0.222 n=5+5)
ImagePackageCatalogers/python-package-cataloger-2             916kB ± 0%     917kB ± 0%  +0.08%  (p=0.032 n=5+5)
ImagePackageCatalogers/php-composer-installed-cataloger-2     205kB ± 0%     205kB ± 0%    ~     (p=0.690 n=5+5)
ImagePackageCatalogers/javascript-package-cataloger-2         149kB ± 0%     149kB ± 0%    ~     (p=1.000 n=5+5)
ImagePackageCatalogers/dpkgdb-cataloger-2                     194kB ± 0%     193kB ± 0%    ~     (p=0.095 n=5+5)
ImagePackageCatalogers/rpmdb-cataloger-2                      224kB ± 0%     224kB ± 0%    ~     (p=0.548 n=5+5)
ImagePackageCatalogers/java-cataloger-2                      3.35MB ± 0%    3.36MB ± 0%  +0.08%  (p=0.032 n=5+5)
ImagePackageCatalogers/apkdb-cataloger-2                     1.24MB ± 0%    1.24MB ± 0%    ~     (p=1.000 n=5+5)
ImagePackageCatalogers/go-module-binary-cataloger-2            672B ± 0%      672B ± 0%    ~     (all equal)
ImagePackageCatalogers/dotnet-deps-cataloger-2                360kB ± 0%     360kB ± 0%    ~     (p=1.000 n=5+5)

name                                                       old allocs/op  new allocs/op  delta
ImagePackageCatalogers/alpmdb-cataloger-2                     85.4k ± 0%     85.4k ± 0%    ~     (p=1.000 n=5+5)
ImagePackageCatalogers/ruby-gemspec-cataloger-2               3.96k ± 0%     3.96k ± 0%    ~     (p=1.000 n=5+5)
ImagePackageCatalogers/python-package-cataloger-2             15.7k ± 0%     15.7k ± 0%    ~     (p=0.175 n=5+5)
ImagePackageCatalogers/php-composer-installed-cataloger-2     5.24k ± 0%     5.24k ± 0%    ~     (p=0.643 n=5+5)
ImagePackageCatalogers/javascript-package-cataloger-2         3.02k ± 0%     3.02k ± 0%    ~     (p=0.333 n=5+4)
ImagePackageCatalogers/dpkgdb-cataloger-2                     4.30k ± 0%     4.30k ± 0%    ~     (all equal)
ImagePackageCatalogers/rpmdb-cataloger-2                      5.53k ± 0%     5.53k ± 0%    ~     (all equal)
ImagePackageCatalogers/java-cataloger-2                       54.9k ± 0%     54.9k ± 0%    ~     (p=0.389 n=5+5)
ImagePackageCatalogers/apkdb-cataloger-2                      5.14k ± 0%     5.14k ± 0%    ~     (p=0.881 n=5+5)
ImagePackageCatalogers/go-module-binary-cataloger-2            15.0 ± 0%      15.0 ± 0%    ~     (all equal)
ImagePackageCatalogers/dotnet-deps-cataloger-2                6.98k ± 0%     6.98k ± 0%    ~     (all equal)

@spiffcs spiffcs requested a review from a team June 16, 2022 18:35
@spiffcs spiffcs merged commit 03e3704 into main Jun 16, 2022
@spiffcs spiffcs deleted the stereoscope-latest branch June 16, 2022 18:56
spiffcs added a commit to jonasagx/syft that referenced this pull request Jun 27, 2022
@spiffcs
Merge branch 'main' into PR
55c1775 
* main: (70 commits)
  fix: add php catalogers to all catalogers (anchore#1065)
  feat: add use-all-catalogers flag (anchore#1050)
  Updates parsing of `yarn.lock` to use `resolved` URLs that are pulled from yarn and npm registries (anchore#926)
  remove OSS Meetup message (anchore#1057)
  add pom.xml cataloger (anchore#1055)
  Add support for CBL-Mariner distroless images (anchore#1045)
  Add catalogers configuration (anchore#1038)
  add template output (anchore#1051)
  update stereoscope to latest version (anchore#1052)
  update zip_read_closer to incorporate zip64 support (anchore#1041)
  Add pacman (alpm) parser support (anchore#943)
  Update of README.md (anchore#1027)
  bump cosign to v1.9.0 to resolve reporting of GHSA-66x3-6cw3-v5gj (anchore#1025)
  add workflows to test new project automation (anchore#1023)
  improve LanguageByName and add unit tests (anchore#1034)
  Read Description from dpkg status files (anchore#996)
  Add announcement for Anchore OSS Virtual Meetup (anchore#1033)
  add main module field to go bin metadata (anchore#1026)
  Add filters to package cataloger (anchore#1021)
  change draft to false for release process (anchore#1016)
  ...

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
aiwantaozi pushed a commit to aiwantaozi/syft that referenced this pull request Oct 20, 2022
@spiffcs @aiwantaozi
update stereoscope to latest version (anchore#1052)
b91b251
GijsCalis pushed a commit to GijsCalis/syft that referenced this pull request Feb 19, 2024
@spiffcs
update stereoscope to latest version (anchore#1052)
44682fb
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wagoodman wagoodman wagoodman approved these changes

@westonsteimel westonsteimel westonsteimel approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@spiffcs @wagoodman @westonsteimel