grype
grype copied to clipboard
Java archive cataloger performance in 0.82.x much slower than 0.81.0
What happened: When upgrading grype from 0.81.0 to 0.82.1 (but also 0.82.0) the performance of scanning java heavy containers has decreased significantly
What you expected to happen: The performance would be similar
How to reproduce it (as minimally and precisely as possible):
$ time ./grype-0810 docker:jenkins/jenkins:latest
...
A newer version of grype is available for download: 0.82.1 (installed version is 0.81.0)
real 0m8.504s
user 0m9.186s
sys 0m1.810s
Using -vv
: [0007] INFO task completed elapsed=3.801204512s task=java-archive-cataloger
$ time ./grype-0821 docker:jenkins/jenkins:latest
...
real 0m28.791s
user 0m38.900s
sys 0m3.588s
Using -vv
: [0027] INFO task completed elapsed=22.68268451s task=java-archive-cataloger
Anything else we need to know?:
Environment:
- Output of
grype version
:
$ ./grype-0810 --version
grype 0.81.0
$ ./grype-0821 --version
grype 0.82.1
- OS (e.g:
cat /etc/os-release
or similar):
$ cat /etc/os-release
PRETTY_NAME="Ubuntu 22.04.4 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.4 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy