Skip to content

Resolve query performance regression on SBOM reports

What does this MR do and why?

In MR 147504 we migrated a couple of sbom reports from fetching vulnerability_findings via the pipeline, to using the project instead.

This was work related to the epic to remove the vulnerability_occurrence_pipelines table.

It turns out that going through project is not as performant, resulting in occasional timeout errors in SBOM ingestion.

This change re-introduces the original code path going through pipeline, and puts the new code path going through the FF we are using to roll out the epic

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.


Resolves: #453953 (closed)
Changelog: fixed
EE: true

Edited by Michael Becker

Merge request reports