Skip to content

Stream SBOM download#4742

Closed
tkopecek wants to merge 1 commit intosigstore:mainfrom
tkopecek:stream-sbom-download
Closed

Stream SBOM download#4742
tkopecek wants to merge 1 commit intosigstore:mainfrom
tkopecek:stream-sbom-download

Conversation

@tkopecek
Copy link

@tkopecek tkopecek commented Mar 6, 2026

Downloading SBOM can be memory-intensive as whole SBOM is read into memory, while it can be streamed.

Closes #4741

Summary

Downloading large SBOMs requires a lot of memory. Using streaming approach would limit it. For testing improvements just monitor used memory e.g. via GODEBUG=gctrace=1 Otherwise there should be no changes in behaviour, so all current tests should pass.

Release Note

NONE

IMPORTANT: This MR is heavily supported by Claude as I'm not a go developer. So, if you're willing to go with this apprach, please a) doublecheck the code changes b) let me know if there is AI-assistance policy which I should acknowledge.

Downloading SBOM can be memory-intensive as whole SBOM is read into
memory, while it can be streamed.

Signed-off-by: Tomas Kopecek <tkopecek@redhat.com>
@tkopecek tkopecek requested a review from a team as a code owner March 6, 2026 18:02
Copy link
Contributor

@Hayden-IO Hayden-IO left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This command is deprecated and should be removed in an upcoming release - #3891 - so I don't think we need to make any updates here.

@tkopecek
Copy link
Author

tkopecek commented Mar 9, 2026

ok, closing MR/issue

@tkopecek tkopecek closed this Mar 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

"download sbom" reads whole blob to memory

2 participants