Skip to content

fix: improve CPE generation for curl APK#1608

Merged
westonsteimel merged 1 commit intomainfrom
apk-curl-cpe-improvements
Feb 23, 2023
Merged

fix: improve CPE generation for curl APK#1608
westonsteimel merged 1 commit intomainfrom
apk-curl-cpe-improvements

Conversation

@westonsteimel
Copy link
Copy Markdown
Contributor

@westonsteimel westonsteimel commented Feb 23, 2023

The correct CPE for curl is cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>
@github-actions
Copy link
Copy Markdown

Benchmark Test Results

Benchmark results from the latest changes vs base branch
goos: linux
goarch: amd64
pkg: github.com/anchore/syft/test/integration
cpu: Intel(R) Xeon(R) Platinum 8370C CPU @ 2.80GHz
                                                          │ ./.tmp/benchmark-1301c94.txt │
                                                          │            sec/op            │
ImagePackageCatalogers/alpmdb-cataloger-2                                   11.88m ±  2%
ImagePackageCatalogers/ruby-gemspec-cataloger-2                             857.7µ ± 16%
ImagePackageCatalogers/python-package-cataloger-2                           3.024m ±  1%
ImagePackageCatalogers/php-composer-installed-cataloger-2                   658.0µ ±  1%
ImagePackageCatalogers/javascript-package-cataloger-2                       355.9µ ±  2%
ImagePackageCatalogers/dpkgdb-cataloger-2                                   476.6µ ±  2%
ImagePackageCatalogers/rpm-db-cataloger-2                                   446.3µ ±  3%
ImagePackageCatalogers/java-cataloger-2                                     10.92m ±  1%
ImagePackageCatalogers/graalvm-native-image-cataloger-2                     8.009µ ±  2%
ImagePackageCatalogers/apkdb-cataloger-2                                    467.1µ ±  1%
ImagePackageCatalogers/go-module-binary-cataloger-2                         18.22µ ±  1%
ImagePackageCatalogers/dotnet-deps-cataloger-2                              967.6µ ±  1%
ImagePackageCatalogers/portage-cataloger-2                                  288.1µ ±  2%
ImagePackageCatalogers/sbom-cataloger-2                                     104.7µ ±  1%
ImagePackageCatalogers/binary-cataloger-2                                   140.3µ ±  1%
geomean                                                                     441.3µ

                                                          │ ./.tmp/benchmark-1301c94.txt │
                                                          │             B/op             │
ImagePackageCatalogers/alpmdb-cataloger-2                                   5.060Mi ± 0%
ImagePackageCatalogers/ruby-gemspec-cataloger-2                             141.9Ki ± 0%
ImagePackageCatalogers/python-package-cataloger-2                           947.0Ki ± 0%
ImagePackageCatalogers/php-composer-installed-cataloger-2                   155.8Ki ± 0%
ImagePackageCatalogers/javascript-package-cataloger-2                       95.93Ki ± 0%
ImagePackageCatalogers/dpkgdb-cataloger-2                                   144.5Ki ± 0%
ImagePackageCatalogers/rpm-db-cataloger-2                                   170.7Ki ± 0%
ImagePackageCatalogers/java-cataloger-2                                     2.724Mi ± 0%
ImagePackageCatalogers/graalvm-native-image-cataloger-2                     1.523Ki ± 0%
ImagePackageCatalogers/apkdb-cataloger-2                                    123.0Ki ± 0%
ImagePackageCatalogers/go-module-binary-cataloger-2                         3.102Ki ± 0%
ImagePackageCatalogers/dotnet-deps-cataloger-2                              314.0Ki ± 0%
ImagePackageCatalogers/portage-cataloger-2                                  75.50Ki ± 0%
ImagePackageCatalogers/sbom-cataloger-2                                     13.06Ki ± 0%
ImagePackageCatalogers/binary-cataloger-2                                   20.83Ki ± 0%
geomean                                                                     106.8Ki

                                                          │ ./.tmp/benchmark-1301c94.txt │
                                                          │          allocs/op           │
ImagePackageCatalogers/alpmdb-cataloger-2                                    86.71k ± 0%
ImagePackageCatalogers/ruby-gemspec-cataloger-2                              2.159k ± 0%
ImagePackageCatalogers/python-package-cataloger-2                            15.48k ± 0%
ImagePackageCatalogers/php-composer-installed-cataloger-2                    3.457k ± 0%
ImagePackageCatalogers/javascript-package-cataloger-2                        1.253k ± 0%
ImagePackageCatalogers/dpkgdb-cataloger-2                                    2.646k ± 0%
ImagePackageCatalogers/rpm-db-cataloger-2                                    3.759k ± 0%
ImagePackageCatalogers/java-cataloger-2                                      38.26k ± 0%
ImagePackageCatalogers/graalvm-native-image-cataloger-2                       40.00 ± 0%
ImagePackageCatalogers/apkdb-cataloger-2                                     3.252k ± 0%
ImagePackageCatalogers/go-module-binary-cataloger-2                           101.0 ± 0%
ImagePackageCatalogers/dotnet-deps-cataloger-2                               5.010k ± 0%
ImagePackageCatalogers/portage-cataloger-2                                   1.487k ± 0%
ImagePackageCatalogers/sbom-cataloger-2                                       392.0 ± 0%
ImagePackageCatalogers/binary-cataloger-2                                     627.0 ± 0%
geomean                                                                      2.175k

@westonsteimel westonsteimel requested a review from a team February 23, 2023 14:31
@westonsteimel westonsteimel merged commit 1150772 into main Feb 23, 2023
@westonsteimel westonsteimel deleted the apk-curl-cpe-improvements branch February 23, 2023 17:32
@kzantow kzantow added enhancement New feature or request bug Something isn't working and removed enhancement New feature or request labels Mar 2, 2023
GijsCalis pushed a commit to GijsCalis/syft that referenced this pull request Feb 19, 2024
Signed-off-by: Weston Steimel <weston.steimel@anchore.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants