Skip to content

Conversation

@ben-dov
Copy link

@ben-dov ben-dov commented Dec 1, 2025

Description

This PR is my attempt to address the component limit inside of AWS Inspector API, without changing the AWS Inspector backend.
Currently, there is no standard way to handle images with over 5000 components.

My solution is to expand the invoke_inspector_scan function.
Changes include:

  • The SBOM file is loaded and the number of component is checked (before calling API).
  • In case we are over 5000, the file will be split to before multiple API calls (up to a value set in the action), that will later be combined (to align with the rest of the processing).
  • Added max_api_calls which controls the maximum number of API calls to provide an upper limit on cost (default 1).

Related Issues

.
Signed-off-by: ben-dov <ben.d@claroty.com>
@ben-dov ben-dov marked this pull request as ready for review December 1, 2025 16:25
@bluesentinelsec
Copy link
Contributor

Hello @ben-dov, thank you very much for the contribution.
We will review your changes through this week and then get back to you with feedback and/or guidance on next steps.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants