fix: SPDX output performance with many relationships

anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Apache License 2.0

5.98k stars 551 forks source link

fix: SPDX output performance with many relationships #3053

Closed kzantow closed 1 month ago

kzantow commented 1 month ago

With many relationships, it is very slow to repeatedly call sbom.CoordinatesForPackage due to file.Coordinate.ID() calls. It turns out these relationship functions are not really being used anywhere else, so this PR just deprecates them in favor of using an index.