CVE monitor loads entire SBOM collection into memory #62

Open
opened 2026-03-30 13:29:55 +00:00 by sharang · 0 comments
Owner

monitor_cves collects all SbomEntry documents into a Vec before processing. At scale this is unbounded memory. Fix: Process repos one at a time using cursor iteration.

monitor_cves collects all SbomEntry documents into a Vec before processing. At scale this is unbounded memory. Fix: Process repos one at a time using cursor iteration.
sharang added the performancehighbugv0.3.0 labels 2026-03-30 13:29:55 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#62