perf(misconf): High memory usage (> 10 GB) on some repos #6958
Closed
david-nascimento-form3
started this conversation in
Bugs
Replies: 1 comment
-
|
Thanks for the report, I'm investigating this. Track #6959 |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Description
Seems related to:
We noticed high memory usage when using the misconfig scanner
terraform, it easily reaches the 24GB of memory when a high number of terraform resources are present [>10000].Note
This profiling information was not from the code sample below
Desired Behavior
To have a steady memory usage, if possible close to tfsec.
Actual Behavior
A high memory usage that leads to a container being killed.
Reproduction Steps
This is an issue with a high number of resources, the following sample easily reach 20GB of memory: locals { team_repos = [ for i in range(1000): "repo-${i}"] teams = [ for i in range(10): "team-${i}"] repositories = merge([for team_id in local.teams : { for repo in local.team_repos : "${team_id}-${repo}" => team_id}]...) } resource "aws_ecr_repository" "ecr-repository" { for_each = local.repositories name = each.key image_tag_mutability = "IMMUTABLE" tags = { "Team" : each.value } } To note that when analysed with `tfsec` the memory did not exceed `1GB`.Target
Filesystem
Scanner
Misconfiguration
Output Format
JSON
Mode
Standalone
Debug Output
$ trivy config --misconfig-scanners terraform test-tf --debugOperating System
Sonoma 14.5, [Container image linux/amd64]
Version
Also tested with latest version of master:
Checklist
trivy image --resetBeta Was this translation helpful? Give feedback.
All reactions