Closed mtardy closed 7 months ago
Oh well, I think I (with the help of my colleagues) found the race issue here, let me write a patch.
oh oh oh, all that to finally discover it has been patched already https://github.com/kubernetes-sigs/bom/pull/312, could we get a release?
will check this week and release it
Just updated the title to reflect that this was already fixed and it would be nice to get a new release. Could I help on that? Thanks
What happened:
We get panics from time to time using bom
v0.5.1
to generate the SBOM in cilium/tetragon.The logs look like that:
See the concerned lines: https://github.com/kubernetes-sigs/bom/blob/5b4933b85df80f015dae11057c1dac7d65f86be9/pkg/spdx/implementation.go#L1012-L1049
What you expected to happen:
I expect bom utility not to crash.
How to reproduce it (as minimally and precisely as possible):
This is yet to be found, it's not a constant so I don't know how easy it is to reproduce.
Anything else we need to know?:
More info there https://github.com/cilium/tetragon/issues/1894.
Environment:
See an example of context. We can get more.