rapid7 / armor Goto Github PK
View Code? Open in Web Editor NEWThis repository is no longer supported
License: Apache License 2.0
This repository is no longer supported
License: Apache License 2.0
The armor tools package should probably just be built using golang. Using binaries to read the armor data would be a much easier way to build ways to look at the armor files as well as to build/package and deploy.
Hi, @alappin-r7, @camci-r7 , I'd like to report a vulnerability issue in com.rapid7:armor-read:0.0.52.
I noticed that com.rapid7:armor-read:0.0.52 directly depends on com.github.luben:zstd-jni:v1.3.5-4 in the pom. However, as shown in the following dependency graph, com.github.luben:zstd-jni:v1.3.5-4 sufferes from the vulnerabilites which the C library zstd(version:1.3.5) exposed: CVE-2021-24031, CVE-2019-11922.
com.github.luben:zstd-jni:v1.4.9-1 (>=v1.4.9-1) has upgraded this vulnerable C library zstd
to the patch version 1.4.9.
Java build tools cannot report vulnerable C libraries, which may induce potential security issues to many downstream Java projects. Could you please upgrade this vulnerable dependency?
By the way, same issue seems also occurs in the com.rapid7:armor-write:0.0.52.
Thanks for your help~
Best regards,
Helen Parr
see title
Currently the library supports supports transactions at the table level. Reducing it down to the shard level will allow it to divide the work up faster and ingestion deployments to deploy at a much faster rate than before. This will also give users the ability to lock at the shard and not table level which is more useful.
The current transaction model puts a lot of trust in the user establish isolation. To enforce better isolation if the user has a bug, we should generation a transaction value that contains the previous transaction value it is based on. Thus when the user commits, we know their transaction and the previous transaction it was based on.
Current validation maintains the submitted transaction doesn't match current or previous..but that isn't strong enough.
Capture writes was built to capture all write requests for a given org. It has proven valuable for debugging and replaying data though we need to redo a little of it to make it easier to work with.
Besides the entity index that is present in the file format, there is potential to add other types of indexes to the format to boost performance such as reverse index, bitmap indexes, sorted indexes, etc. It is quite possible to add more indexes to the file format for readers to leverage to filter, reduce, sort at much earlier stages of the query workflow pipeline.
The current read store is set to a pre-configured number of shards that is set by the user. This setting is a bit inflexible since all tables and each tenant must be set to that value. It would be better if the number of shards that is set for a table can differ from other tables and tenants.
We should be using localstack s3, to test out use-cases involving s3. This will make it easier to build more extensive tests.
Redo the armor file format such that the sections do not have to be in fixed sequential order. Allowing certain sections to come in first, second or last can allow for future optimizations.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.