More logs in Vuln Cache Proc
@@ -254,7 +254,11 @@ public class VulnerabilityCacheProcessorPlugin extends Plugin {
var depSet = graphResolver.resolveDependencies(revision, dbContext, true);
var depIds = depSet.stream().map(r -> r.id).collect(Collectors.toSet());
+ logger.info("Dep IDs: " + depIds.size());
+
var vulnerableDependencies = kbDao.findVulnerablePackageVersions(depIds);
+ logger.info("Vulnerable IDs: " + vulnerableDependencies.size());
+
var databaseMerger = new CGMerger(depIds, dbContext, graphDao);
var graph = databaseMerger.mergeWithCHA(revision.toString());
if (graph == null) {
@@ -265,6 +269,8 @@ public class VulnerabilityCacheProcessorPlugin extends Plugin {
}
var vulnerabilities = kbDao.findVulnerableCallables(vulnerableDependencies, graph.nodes());
+ logger.info("Vulnerable Callables: " + vulnerableDependencies.size());
+
var internalCallables = kbDao.getPackageInternalCallableIDs(revision.product().toString(), revision.version.toString());
// Find all paths between any internal node and any vulnerable node in the graph
