google / osv.dev

Open source vulnerability DB and triage service.
https://osv.dev
Apache License 2.0
1.49k stars 186 forks source link

refactor(combine-to-osv): attempt to change `gcloud` to `gsutil` #2611

Closed hogo6002 closed 2 weeks ago

hogo6002 commented 2 weeks ago

The combine-to-osv job takes more than 1 hour to write files to the cloud, while debian-cve-convert (around 40k files) takes less than 1 minute. Although combine-to-osv processes more files than debian-cve-convert, the time difference is excessive. debian-cve-convert uses gsutil, and combine-to-osv uses gcloud SDK.

Attempt to replace gcloud with gsutil in combine-to-osv and conduct performance testing to determine if this improves performance.

The importer relies on blob.time_created to determine if GSC records need to be re-imported. Updating to gsutil should not affect the creation time; only the modification time will remain the same if there are no changes.