Skip to content

test: improve performance of slow language scanner tests - #5857

Open
Dev9269 wants to merge 2 commits into
ossf:mainfrom
Dev9269:main
Open

Dev9269 wants to merge 2 commits into
ossf:mainfrom
Dev9269:main

Conversation

@Dev9269

@Dev9269 Dev9269 commented Jul 26, 2026

Copy link
Copy Markdown

Fixes #4321

Trims test data files to only keep products needed by test assertions, reducing CVE database lookups during test execution.

Biggest improvements:

  • \Cargo.lock: ~100+ packages down to 24 (was 291s)

  • env.lock: ~80 packages down to 17 (was 99s)
  • \Gemfile.lock: ~100+ gems down to 47 (was 203s)

  • equirements.txt: 17 packages down to 5 (was 119s)

Other files trimmed:

  • \go.mod: 51 requires down to 14
  • \package-lock.json: trimmed to 2 dependencies
  • \cpanfile: trimmed to 3 requires
  • \composer.lock: trimmed to 4 packages
  • \conan.lock: trimmed to 3 entries (requires + build_requires)
  • \Package.resolved: trimmed to 1 pin

Each file retains exactly the products expected by the test assertions in \ est_language_scanner.py, so no test coverage is lost.

Trim test data files to only keep products needed by test assertions.
Reduces CVE database lookups by removing unused products from lock
files and dependency manifests.

- Cargo.lock: ~100+ packages -> 24 (RUST_PRODUCTS)
- renv.lock: ~80 packages -> 17 (R_PRODUCTS)
- Gemfile.lock: ~100+ gems -> 47 (RUBY_PRODUCTS)
- requirements.txt: 17 packages -> 5 (PYTHON_PRODUCTS)
- go.mod: 51 require entries -> 14 (GO_PRODUCTS)
- package-lock.json: reduced to 2 dependencies (JAVASCRIPT_PRODUCTS)
- cpanfile: reduced to 3 requires (PERL_PRODUCTS)
- composer.lock: reduced to 4 packages (PHP_PRODUCTS)
- conan.lock: reduced to 3 entries (CONAN_PRODUCTS)
- Package.resolved: reduced to 1 pin (SWIFT_PRODUCTS)

Signed-off-by: Jainam h.maru <157703342+Dev9269@users.noreply.github.com>
Signed-off-by: Jainam h.maru <157703342+Dev9269@users.noreply.github.com>
@Dev9269
Dev9269 force-pushed the main branch 2 times, most recently from 6256367 to b66b8d6 Compare August 17, 2026 17:05

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

test: improve performance on our slowest tests

1 participant