Fimeg/RedFlag
Watch
1
0
Fork
You've already forked RedFlag
 0
Code Releases Activity

0.2.3.0: fix OSV supply-chain checks — bounded concurrency, persist-driven dedup

Browse source 
- Replace unbounded goroutine fan-out with bounded pool (8 concurrent)
  so 300-package dnf scans no longer timeout every request against api.osv.dev
- Drop in-memory osvDedup sync.Map; gate on persisted supply_chain_checked_at
  so the dedup survives restart and failed checks retry naturally
- On query failure, record the error without checked_at so the package stays
  a candidate for the next cycle (ETHOS: errors are history, assume failure)
- Shared RunOSVChecks in services/ used by both scan path and startup backfill
- Add FreshSupplyChainPackages query for persist-driven freshness lookup
- Bump version to 0.2.3.0
This commit is contained in:
Fimeg 2026-05-31 17:54:09 -04:00
commit e8f69212be
7 changed files with 172 additions and 68 deletions
Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -234,7 +234,7 @@ I am a Systems Architect with 25 years on the frontier. I build sovereign agent
- **Consulting Expeditions ($175/hr):** Hands-on architecture, network engineering, and system hardening.
- **Incident Response ($250/hr):** Ransomware restoration, AD/DNS rebuilds, and pulling your servers back from the void.
**Contact:** casey@samaritansolutions.net | [LinkedIn](https://www.linkedin.com/in/casey-tunturi) | [GitHub Sponsors](https://github.com/sponsors/Fimeg)
**Contact:** casey@samaritansolutions.net | [LinkedIn](https://www.linkedin.com/in/casey-tunturi) | [GitHub Sponsors](https://github.com/sponsors/Fimeg) | [Discord](https://discord.gg/TReG3mZC4Y)
---