Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

update stereoscope to latest version #1052

Merged
merged 1 commit into from
Jun 16, 2022
Merged

update stereoscope to latest version #1052

merged 1 commit into from
Jun 16, 2022

Conversation

spiffcs
Copy link
Contributor

@spiffcs spiffcs commented Jun 16, 2022 •
edited
Loading

Resolves: CVE-2022-31030

Signed-off-by: Christopher Phillips christopher.phillips@anchore.com

@spiffcs
update stereoscope to latest version
35bd72d 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
@github-actions
Copy link

github-actions bot commented Jun 16, 2022 •
edited
Loading

Benchmark Test Results

Benchmark results from the latest changes vs base branch 
name                                                       old time/op    new time/op    delta
ImagePackageCatalogers/alpmdb-cataloger-2                    11.3ms ± 2%    10.9ms ± 1%  -3.67%  (p=0.008 n=5+5)
ImagePackageCatalogers/ruby-gemspec-cataloger-2              1.27ms ± 7%    1.25ms ±10%    ~     (p=0.151 n=5+5)
ImagePackageCatalogers/python-package-cataloger-2            3.07ms ± 1%    2.99ms ± 1%  -2.89%  (p=0.008 n=5+5)
ImagePackageCatalogers/php-composer-installed-cataloger-2    1.00ms ± 0%    0.99ms ± 1%  -1.57%  (p=0.008 n=5+5)
ImagePackageCatalogers/javascript-package-cataloger-2         681µs ± 1%     671µs ± 1%  -1.42%  (p=0.032 n=5+5)
ImagePackageCatalogers/dpkgdb-cataloger-2                     818µs ± 1%     796µs ± 1%  -2.80%  (p=0.008 n=5+5)
ImagePackageCatalogers/rpmdb-cataloger-2                      790µs ± 1%     759µs ± 1%  -3.92%  (p=0.008 n=5+5)
ImagePackageCatalogers/java-cataloger-2                      13.6ms ± 2%    13.7ms ± 1%    ~     (p=0.095 n=5+5)
ImagePackageCatalogers/apkdb-cataloger-2                     1.17ms ± 2%    1.15ms ± 2%    ~     (p=0.095 n=5+5)
ImagePackageCatalogers/go-module-binary-cataloger-2          2.07µs ± 2%    2.14µs ± 3%    ~     (p=0.056 n=5+5)
ImagePackageCatalogers/dotnet-deps-cataloger-2               1.29ms ± 1%    1.24ms ± 1%  -3.93%  (p=0.008 n=5+5)

name                                                       old alloc/op   new alloc/op   delta
ImagePackageCatalogers/alpmdb-cataloger-2                    5.25MB ± 0%    5.25MB ± 0%    ~     (p=0.690 n=5+5)
ImagePackageCatalogers/ruby-gemspec-cataloger-2               193kB ± 0%     193kB ± 0%    ~     (p=0.222 n=5+5)
ImagePackageCatalogers/python-package-cataloger-2             916kB ± 0%     917kB ± 0%  +0.08%  (p=0.032 n=5+5)
ImagePackageCatalogers/php-composer-installed-cataloger-2     205kB ± 0%     205kB ± 0%    ~     (p=0.690 n=5+5)
ImagePackageCatalogers/javascript-package-cataloger-2         149kB ± 0%     149kB ± 0%    ~     (p=1.000 n=5+5)
ImagePackageCatalogers/dpkgdb-cataloger-2                     194kB ± 0%     193kB ± 0%    ~     (p=0.095 n=5+5)
ImagePackageCatalogers/rpmdb-cataloger-2                      224kB ± 0%     224kB ± 0%    ~     (p=0.548 n=5+5)
ImagePackageCatalogers/java-cataloger-2                      3.35MB ± 0%    3.36MB ± 0%  +0.08%  (p=0.032 n=5+5)
ImagePackageCatalogers/apkdb-cataloger-2                     1.24MB ± 0%    1.24MB ± 0%    ~     (p=1.000 n=5+5)
ImagePackageCatalogers/go-module-binary-cataloger-2            672B ± 0%      672B ± 0%    ~     (all equal)
ImagePackageCatalogers/dotnet-deps-cataloger-2                360kB ± 0%     360kB ± 0%    ~     (p=1.000 n=5+5)

name                                                       old allocs/op  new allocs/op  delta
ImagePackageCatalogers/alpmdb-cataloger-2                     85.4k ± 0%     85.4k ± 0%    ~     (p=1.000 n=5+5)
ImagePackageCatalogers/ruby-gemspec-cataloger-2               3.96k ± 0%     3.96k ± 0%    ~     (p=1.000 n=5+5)
ImagePackageCatalogers/python-package-cataloger-2             15.7k ± 0%     15.7k ± 0%    ~     (p=0.175 n=5+5)
ImagePackageCatalogers/php-composer-installed-cataloger-2     5.24k ± 0%     5.24k ± 0%    ~     (p=0.643 n=5+5)
ImagePackageCatalogers/javascript-package-cataloger-2         3.02k ± 0%     3.02k ± 0%    ~     (p=0.333 n=5+4)
ImagePackageCatalogers/dpkgdb-cataloger-2                     4.30k ± 0%     4.30k ± 0%    ~     (all equal)
ImagePackageCatalogers/rpmdb-cataloger-2                      5.53k ± 0%     5.53k ± 0%    ~     (all equal)
ImagePackageCatalogers/java-cataloger-2                       54.9k ± 0%     54.9k ± 0%    ~     (p=0.389 n=5+5)
ImagePackageCatalogers/apkdb-cataloger-2                      5.14k ± 0%     5.14k ± 0%    ~     (p=0.881 n=5+5)
ImagePackageCatalogers/go-module-binary-cataloger-2            15.0 ± 0%      15.0 ± 0%    ~     (all equal)
ImagePackageCatalogers/dotnet-deps-cataloger-2                6.98k ± 0%     6.98k ± 0%    ~     (all equal)

@spiffcs spiffcs requested a review from a team June 16, 2022 18:35
@spiffcs spiffcs merged commit 03e3704 into main Jun 16, 2022
@spiffcs spiffcs deleted the stereoscope-latest branch June 16, 2022 18:56
spiffcs added a commit to jonasagx/syft that referenced this pull request Jun 27, 2022
@spiffcs
Merge branch 'main' into PR
55c1775 
* main: (70 commits)
  fix: add php catalogers to all catalogers (anchore#1065)
  feat: add use-all-catalogers flag (anchore#1050)
  Updates parsing of `yarn.lock` to use `resolved` URLs that are pulled from yarn and npm registries (anchore#926)
  remove OSS Meetup message (anchore#1057)
  add pom.xml cataloger (anchore#1055)
  Add support for CBL-Mariner distroless images (anchore#1045)
  Add catalogers configuration (anchore#1038)
  add template output (anchore#1051)
  update stereoscope to latest version (anchore#1052)
  update zip_read_closer to incorporate zip64 support (anchore#1041)
  Add pacman (alpm) parser support (anchore#943)
  Update of README.md (anchore#1027)
  bump cosign to v1.9.0 to resolve reporting of GHSA-66x3-6cw3-v5gj (anchore#1025)
  add workflows to test new project automation (anchore#1023)
  improve LanguageByName and add unit tests (anchore#1034)
  Read Description from dpkg status files (anchore#996)
  Add announcement for Anchore OSS Virtual Meetup (anchore#1033)
  add main module field to go bin metadata (anchore#1026)
  Add filters to package cataloger (anchore#1021)
  change draft to false for release process (anchore#1016)
  ...

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
aiwantaozi pushed a commit to aiwantaozi/syft that referenced this pull request Oct 20, 2022
@spiffcs @aiwantaozi
update stereoscope to latest version (anchore#1052)
b91b251
GijsCalis pushed a commit to GijsCalis/syft that referenced this pull request Feb 19, 2024
@spiffcs
update stereoscope to latest version (anchore#1052)
44682fb
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@wagoodman wagoodman wagoodman approved these changes

@westonsteimel westonsteimel westonsteimel approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@spiffcs @wagoodman @westonsteimel