Add debug logging to Vuln Cache Proc plugin
@@ -241,12 +241,17 @@ public class VulnerabilityCacheProcessorPlugin extends Plugin {
var version = revisionObj.getString("version");
var timestamp = revisionObj.optLong("createdAt", -1);
var revision = new Revision(id, groupId, artifactId, version, new Timestamp(timestamp));
+ logger.info("Processing revision: " + revision.toString());
var depSet = graphResolver.resolveDependencies(revision, dbContext, true);
var depIds = depSet.stream().map(r -> r.id).collect(Collectors.toSet());
var vulnerableDependencies = kbDao.findVulnerablePackageVersions(depIds);
var databaseMerger = new CGMerger(depIds, dbContext, graphDao);
var graph = databaseMerger.mergeWithCHA(revision.product().toString() + Constants.mvnCoordinateSeparator + revision.version.toString());
+
+ logger.info("Graph Sizer: " + graph.numNodes());
+ logger.info("Deps: " + vulnerableDependencies.size());
+
var vulnerabilities = kbDao.findVulnerableCallables(vulnerableDependencies, graph.nodes());
var internalCallables = kbDao.getPackageInternalCallableIDs(revision.product().toString(), revision.version.toString());
