Skip to content

[pull] main from guacsec:main#145

Merged
pull[bot] merged 18 commits intotrustification:mainfrom
guacsec:main
Mar 31, 2026
Merged

[pull] main from guacsec:main#145
pull[bot] merged 18 commits intotrustification:mainfrom
guacsec:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Mar 31, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

ctron and others added 18 commits March 31, 2026 12:43
Instead of fully fetching all information of an SBOM and then just using
the ID, this fetches the bare minimum. But then also fetches the
source_document in the same step. Passing on to other parts which need
it. This should prevent one N+1 select issues.
This adds a v3 sbom list endpoint, which returns less information, but
is much faster.

Also, allow overriding the slow SQL threshold.
This was a red herring from AI. Node IDs are strings.
Co-authored-by: Claude <noreply@anthropic.com>
Fix license filter using UNION subquery instead of OR'd IN subqueries to
avoid full table scan on qualified_purl

Co-authored-by: Claude <noreply@anthropic.com>
Replaces OR'd IN subqueries with a single UNION subquery in fetch_sboms
and fetch_sbom_packages, avoiding full table scans on sbom and
sbom_package.

Co-authored-by: Claude <noreply@anthropic.com>
Instrumentation on the sync `new` function doesn't add much.
@pull pull bot locked and limited conversation to collaborators Mar 31, 2026
@pull pull bot added the ⤵️ pull label Mar 31, 2026
@pull pull bot merged commit 705e1ae into trustification:main Mar 31, 2026
2 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant