Hank Donnay

> [!WARNING] > This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite....

Oops, only half done.

Current dependencies on/for this PR: * `main` * **PR #1954** 👈 * **PR #1955** This [stack of pull requests](https://stacking.dev/?utm_source=stack-comment) is managed by [Graphite](https://app.graphite.dev/github/pr/quay/clair/1954?utm_source=stack-comment).

This'll probably have to wait until go1.22 releases, so we can make use of new go1.21 API.

I've opened a PR at quay/claircore#1120 in an attempt to address this. If you can build a patched `clairctl` and take it for a spin, I'd greatly appreciate it!

[clairctl.gz](https://github.com/quay/clair/files/13191775/clairctl.gz) I built a way to test this a bit easier [here](https://github.com/quay/clair-workspace), and build this version of `clairctl` (for amd64/linux). Please try it if you get a chance.

okay, thanks for trying. I'll keep hacking at it.

Current version of that PR runs and seems to peak (just eyeballing it) at ~2GB of memory usage.

I'll also note that setting `GOMAXPROCS` to something like `1` seems to pretty aggressively constrain memory with the linked PR.

Should be completely fixed in v4.7.3