thought-machine / falco-probes

Automated build and mirror of eBPF kernel probes for use as a driver with the Falco runtime security agent (https://falco.org/)
Apache License 2.0
16 stars 4 forks source link

Skip previously compiled kernel package by checking github releases via API #41

Closed sHesl closed 3 years ago

sHesl commented 3 years ago

While looking into #15, I noticed the ListRelease endpoint of the github releases API returns each release with an unpaginated list of all the assets in each release. The number of releases is paginated (default is 30, max 100), but the asset list isn't (for example, this release returned all 10k assets w/names).

We could use this list to cross-reference for previously compiled probes, needing just 1 github API request to do so.

Example run.

sHesl commented 3 years ago

Ah @VJftw .. I misunderstood the cos issue... will close this to finish the #33 implementation.