Justin

So I'm thinking if we can move the RUN apt-get -y install build-essential git... and the corresponding 'install runtime dependencies' part, into another script that gets the version passed, we...

Oh, and if the buildbro part is split into a 'getbro' and 'buildbro' script the stuff the gitbro does can be incorporated. that would let someone do docker build --build-arg...

If you are using `serve` you don't necessarily need a separate whois call as `serve` can inject the identity headers: https://tailscale.com/kb/1312/serve#identity-headers In this sort of deployment there wouldn't be any...

fwiw, it can potentially be more useful to have the metric be the 'start time' vs the 'up time'. that's how prometheus normally does it for the node_exporter: ``` #...

Ah, forgot to update the baselines. there's a number of duplicate software entries that this change removes.

Oh, and I remembered the other area where this has a huge performance impact: internal http traffic. If zeek sees requests to an internal nginx server, it'll trigger software found...

@awelzel mostly happy, but I need to study the baseline changes in more detail. The change breaks testing/btest/scripts/policy/frameworks/software/version-changes.zeek. That is testing that the minor version changes from 0 -> 1...

Might want to rewrite the history of the repo to remove the old version, but not sure what problems that might cause.

Just realized could have probably done this and had it been even smaller: ``` local b = CreditCardExposure::bin_list; local last: Bank; b[377620] = last = Bank($brand="AMERICAN EXPRESS", $typ="", $name="", $country="Sweden");...

Ended up making that change and also removed some spaces, got the file down from 10MB to 6.4MB