ossmalware
ossmalware copied to clipboard
jordan-wright
To handle continuous monitoring for PyPI, we should create a lambda that runs on an interval to request PyPI's RSS feed and process new packages by pushing them up to...
Right now we need to maintain EC2 worker instances for processing which isn't ideal since weird errors that occur during processing can propagate to cause the entire host to stall....
Right now, this system runs on AWS which was fine for the initial experiment. As this project moves under the umbrella of the OpenSSF, we'll want to move it to...
For some reason, hosts would occasionally have defunct sysdig processes laying around. And more generally I saw the occasional package processing weirdness result in a major stalling of the workers....
Right now EC2 instances are manually provisioned instead of using Terraform. This is from my inexperience with Terraform, but I'd like to take the time to change this. I'm also...
Right now the S3 and SQS names are hard coded. We should make these proper variables. I'm not a terraform expert so I'm not sure what else we can do...
While we're still using persistent hosts (EC2 instances) as workers instead of something like Fargate, we should make the setup of workers easy. Right now, users have to manually run...
how to run the project, are there more specific steps we can follow, thanks~
