Skip to content

[pull] main from guacsec:main#211

Merged
pull[bot] merged 3 commits into
trustification:mainfrom
guacsec:main
Jul 15, 2026
Merged

[pull] main from guacsec:main#211
pull[bot] merged 3 commits into
trustification:mainfrom
guacsec:main

Conversation

@pull

@pull pull Bot commented Jul 15, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

The SBOM detail query joins product_version on sbom_id but there is
no index on that column. This forces a sequential scan of the entire
product_version table (140k+ rows) to find a single match, adding
~8ms per call. With ~2600 calls this query accounts for 40% of total
DB time.

Add a btree index on product_version(sbom_id) to convert the seq
scan into an index lookup.
Add a batch-prefetch mechanism that collapses N individual queries
into one query per SBOM ID.

Assisted-by: Claude Code
When multiple concurrent graph walks discover the same external SBOM
(common with buffer_unordered concurrency), each calls
AncestorCache::prefetch for that SBOM.

Add a per-sbom_id OnceCell barrier so only the first concurrent caller
executes the batch query; the others await the same barrier and find
the per-node cache already populated.

Assisted-by: Claude Code
@pull pull Bot locked and limited conversation to collaborators Jul 15, 2026
@pull pull Bot added the ⤵️ pull label Jul 15, 2026
@pull
pull Bot merged commit 9d0cd82 into trustification:main Jul 15, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant