Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Catalog TiDB binary #2763

Closed
witchcraze opened this issue Apr 10, 2024 · 1 comment
Closed

Catalog TiDB binary #2763

witchcraze opened this issue Apr 10, 2024 · 1 comment
Labels
enhancement New feature or request good-first-issue Good for newcomers

Comments

@witchcraze
Copy link
Contributor

witchcraze commented Apr 10, 2024 •
edited
Loading

What would you like to be added:

An additional file classifier which finds TiDB binary.

Why is this needed:

TiDB is widely used.

Pulls 5M+
https://hub.docker.com/r/pingcap/tidb/tags

$ syft pingcap/tidb | grep tidb
 ✔ Loaded image                                                                                    pingcap/tidb:latest   ✔ Parsed image                                sha256:bd253ee807c67f8c25e71d2d8c33368f7c336f7b638c7051c81e263b47077cdd
 ✔ Cataloged contents                                 f1a3d6f86587718b021c0590b10e978b7721076fef23e58197e8631524e98405
   ├── ✔ Packages                        [324 packages]
   ├── ✔ File digests                    [6,199 files]
   ├── ✔ File metadata                   [6,199 locations]
   └── ✔ Executables                     [590 executables]
github.com/pingcap/tidb                                     1.4.4                                  go-module

$ docker run -it --rm --name tidb pingcap/tidb
$ docker exec tidb  /tidb-server -V
Release Version: v7.5.1
Edition: Community
Git Commit Hash: 7d16cc79e81bbf573124df3fd9351c26963f3e70
Git Branch: heads/refs/tags/v7.5.1
UTC Build Time: 2024-02-27 14:28:32
GoVersion: go1.21.6
Race Enabled: false
Check Table Before Drop: false
Store: unistore

Additional context:

cpe:2.3:a:pingcap:tidb:*:*:*:*:*:*:*:* is used in NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-31011

EOL
TiDB Release Support Policy | PingCAP

Version will be shown in ...

  • TiDBReleaseVersion=v8.0.0 (older versions not match)
  • heads/refs/tags/v5.4.3 (8.0.0 not match)
  • v8.0.0 (7.5.0 not match)

v8.0.0

# /tidb-server -V
Release Version: v8.0.0
Edition: Community
Git Commit Hash: 8ba1fa452b1ccdbfb85879ea94b9254aabba2916
Git Branch: HEAD
UTC Build Time: 2024-03-28 14:22:15
GoVersion: go1.21.4
Race Enabled: false
Check Table Before Drop: false
Store: unistore

# strings /tidb-server | grep -E "TiDBReleaseVersion=v[0-9]+\.[0-9]+\.[0-9]+"
build   -ldflags="-X \"github.com/pingcap/tidb/pkg/parser/mysql.TiDBReleaseVersion=v8.0.0\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBBuildTS=2024-03-28 14:22:15\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitHash=8ba1fa452b1ccdbfb85879ea94b9254aabba2916\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitBranch=HEAD\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBEdition=Community\" "
build   -ldflags="-X \"github.com/pingcap/tidb/pkg/parser/mysql.TiDBReleaseVersion=v8.0.0\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBBuildTS=2024-03-28 14:22:15\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitHash=8ba1fa452b1ccdbfb85879ea94b9254aabba2916\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitBranch=HEAD\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBEdition=Community\" "

# strings /tidb-server | grep -E  "heads\/refs\/tags\/v[0-9]+\.[0-9]+\.[0-9]+"
#

# strings /tidb-server | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$'
v8.0.0
1.4.4

v7.5.0

# /tidb-server -V
Release Version: v7.5.0
Edition: Community
Git Commit Hash: 069631e2ecfedc000ffb92c67207bea81380f020
Git Branch: heads/refs/tags/v7.5.0
UTC Build Time: 2023-11-24 08:50:14
GoVersion: go1.21.3
Race Enabled: false
Check Table Before Drop: false
Store: unistore

# strings /tidb-server | grep -E "TiDBReleaseVersion=v[0-9]+\.[0-9]+\.[0-9]+"
build   -ldflags="-X \"github.com/pingcap/tidb/pkg/parser/mysql.TiDBReleaseVersion=v7.5.0\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBBuildTS=2023-11-24 08:50:14\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitHash=069631e2ecfedc000ffb92c67207bea81380f020\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitBranch=heads/refs/tags/v7.5.0\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBEdition=Community\" "
build   -ldflags="-X \"github.com/pingcap/tidb/pkg/parser/mysql.TiDBReleaseVersion=v7.5.0\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBBuildTS=2023-11-24 08:50:14\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitHash=069631e2ecfedc000ffb92c67207bea81380f020\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitBranch=heads/refs/tags/v7.5.0\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBEdition=Community\" "

# strings /tidb-server | grep -E  "heads/refs/tags/v[0-9]+\.[0-9]+\.[0-9]+"
heads/refs/tags/v7.5.0
build   -ldflags="-X \"github.com/pingcap/tidb/pkg/parser/mysql.TiDBReleaseVersion=v7.5.0\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBBuildTS=2023-11-24 08:50:14\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitHash=069631e2ecfedc000ffb92c67207bea81380f020\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitBranch=heads/refs/tags/v7.5.0\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBEdition=Community\" "
build   -ldflags="-X \"github.com/pingcap/tidb/pkg/parser/mysql.TiDBReleaseVersion=v7.5.0\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBBuildTS=2023-11-24 08:50:14\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitHash=069631e2ecfedc000ffb92c67207bea81380f020\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBGitBranch=heads/refs/tags/v7.5.0\" -X \"github.com/pingcap/tidb/pkg/util/versioninfo.TiDBEdition=Community\" "

# strings /tidb-server | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$'
1.4.4

v7.1.0

# /tidb-server -V
Release Version: v7.1.0
Edition: Community
Git Commit Hash: 635a4362235e8a3c0043542e629532e3c7bb2756
Git Branch: heads/refs/tags/v7.1.0
UTC Build Time: 2023-05-30 10:58:57
GoVersion: go1.20.3
Race Enabled: false
TiKV Min Version: 6.2.0-alpha
Check Table Before Drop: false
Store: unistore

# strings /tidb-server | grep -E "TiDBReleaseVersion=v[0-9]+\.[0-9]+\.[0-9]+"
build   -ldflags="-X \"github.com/pingcap/tidb/parser/mysql.TiDBReleaseVersion=v7.1.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBBuildTS=2023-05-30 10:58:57\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitHash=635a4362235e8a3c0043542e629532e3c7bb2756\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitBranch=heads/refs/tags/v7.1.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBEdition=Community\" "
build   -ldflags="-X \"github.com/pingcap/tidb/parser/mysql.TiDBReleaseVersion=v7.1.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBBuildTS=2023-05-30 10:58:57\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitHash=635a4362235e8a3c0043542e629532e3c7bb2756\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitBranch=heads/refs/tags/v7.1.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBEdition=Community\" "

# strings /tidb-server | grep -E  "heads/refs/tags/v[0-9]+\.[0-9]+\.[0-9]+"
heads/refs/tags/v7.1.0
build   -ldflags="-X \"github.com/pingcap/tidb/parser/mysql.TiDBReleaseVersion=v7.1.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBBuildTS=2023-05-30 10:58:57\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitHash=635a4362235e8a3c0043542e629532e3c7bb2756\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitBranch=heads/refs/tags/v7.1.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBEdition=Community\" "
build   -ldflags="-X \"github.com/pingcap/tidb/parser/mysql.TiDBReleaseVersion=v7.1.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBBuildTS=2023-05-30 10:58:57\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitHash=635a4362235e8a3c0043542e629532e3c7bb2756\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitBranch=heads/refs/tags/v7.1.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBEdition=Community\" "

# strings /tidb-server | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$'
v7.1.0
1.4.4

v6.0.0

# /tidb-server -V
Release Version: v6.0.0
Edition: Community
Git Commit Hash: 36a9810441ca0e496cbd22064af274b3be771081
Git Branch: heads/refs/tags/v6.0.0
UTC Build Time: 2022-03-31 10:33:28
GoVersion: go1.18
Race Enabled: false
TiKV Min Version: v3.0.0-60965b006877ca7234adaced7890d7b029ed1306
Check Table Before Drop: false

# strings /tidb-server | grep -E "TiDBReleaseVersion=v[0-9]+\.[0-9]+\.[0-9]+"
build   -ldflags="-X \"github.com/pingcap/tidb/parser/mysql.TiDBReleaseVersion=v6.0.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBBuildTS=2022-03-31 10:33:28\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitHash=36a9810441ca0e496cbd22064af274b3be771081\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitBranch=heads/refs/tags/v6.0.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBEdition=Community\" "
build   -ldflags="-X \"github.com/pingcap/tidb/parser/mysql.TiDBReleaseVersion=v6.0.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBBuildTS=2022-03-31 10:33:28\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitHash=36a9810441ca0e496cbd22064af274b3be771081\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitBranch=heads/refs/tags/v6.0.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBEdition=Community\" "

# strings /tidb-server | grep -E  "heads/refs/tags/v[0-9]+\.[0-9]+\.[0-9]+"
heads/refs/tags/v6.0.0
build   -ldflags="-X \"github.com/pingcap/tidb/parser/mysql.TiDBReleaseVersion=v6.0.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBBuildTS=2022-03-31 10:33:28\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitHash=36a9810441ca0e496cbd22064af274b3be771081\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitBranch=heads/refs/tags/v6.0.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBEdition=Community\" "
build   -ldflags="-X \"github.com/pingcap/tidb/parser/mysql.TiDBReleaseVersion=v6.0.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBBuildTS=2022-03-31 10:33:28\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitHash=36a9810441ca0e496cbd22064af274b3be771081\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBGitBranch=heads/refs/tags/v6.0.0\" -X \"github.com/pingcap/tidb/util/versioninfo.TiDBEdition=Community\" "

# strings /tidb-server | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$'
v6.0.0

v5.4.3 (latest of 5.x.x)

# /tidb-server -V
Release Version: v5.4.3
Edition: Community
Git Commit Hash: f9b13b76505429b48cc479020e1b4b260a689175
Git Branch: heads/refs/tags/v5.4.3
UTC Build Time: 2022-09-28 09:21:22
GoVersion: go1.16.4
Race Enabled: false
TiKV Min Version: v3.0.0-60965b006877ca7234adaced7890d7b029ed1306
Check Table Before Drop: false

# strings /tidb-server | grep -E "TiDBReleaseVersion=v[0-9]+\.[0-9]+\.[0-9]+"
#

# strings /tidb-server | grep -E  "heads/refs/tags/v[0-9]+\.[0-9]+\.[0-9]+"
heads/refs/tags/v5.4.3

# strings /tidb-server | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$'
v5.4.3

v5.0.0

# /tidb-server -V
Release Version: v5.0.0
Edition: Community
Git Commit Hash: bdac0885cd11bdf571aad9353bfc24e13554b91c
Git Branch: heads/refs/tags/v5.0.0
UTC Build Time: 2021-04-06 16:36:29
GoVersion: go1.13
Race Enabled: false
TiKV Min Version: v3.0.0-60965b006877ca7234adaced7890d7b029ed1306
Check Table Before Drop: false

# strings /tidb-server | grep -E "TiDBReleaseVersion=v[0-9]+\.[0-9]+\.[0-9]+"
#

# strings /tidb-server | grep -E  "heads/refs/tags/v[0-9]+\.[0-9]+\.[0-9]+"
heads/refs/tags/v5.0.0

# strings /tidb-server | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$'
v5.0.0

v4.0.12 (latest of 4.x.x)

# /tidb-server -V
Release Version: v4.0.12
Edition: Community
Git Commit Hash: 11a9254bec522c1991033a6098f6dccadc6eb7c1
Git Branch: heads/refs/tags/v4.0.12
UTC Build Time: 2021-04-02 03:23:24
GoVersion: go1.13
Race Enabled: false
TiKV Min Version: v3.0.0-60965b006877ca7234adaced7890d7b029ed1306
Check Table Before Drop: false

# strings /tidb-server | grep -E "TiDBReleaseVersion=v[0-9]+\.[0-9]+\.[0-9]+"
# 

# strings /tidb-server | grep -E  "heads/refs/tags/v[0-9]+\.[0-9]+\.[0-9]+"
heads/refs/tags/v4.0.12

# strings /tidb-server | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$'
v4.0.12

v4.0.0

# /tidb-server -V
Release Version: v4.0.0
Edition: Community
Git Commit Hash: 689a6b6439ae7835947fcaccf329a3fc303986cb
Git Branch: heads/refs/tags/v4.0.0
UTC Build Time: 2020-05-28 01:37:40
GoVersion: go1.13
Race Enabled: false
TiKV Min Version: v3.0.0-60965b006877ca7234adaced7890d7b029ed1306
Check Table Before Drop: false

# strings /tidb-server | grep -E "TiDBReleaseVersion=v[0-9]+\.[0-9]+\.[0-9]+"
#

# strings /tidb-server | grep -E  "heads/refs/tags/v[0-9]+\.[0-9]+\.[0-9]+"
heads/refs/tags/v4.0.0

# strings /tidb-server | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$'
v4.0.0

v3.1.2 (latest of 3.x.x)

# /tidb-server -V
Release Version: v3.1.2
Git Commit Hash: df4c9f05c49c6b8de74083d3befc20ecd8cefbfd
Git Branch: heads/refs/tags/v3.1.2
UTC Build Time: 2020-06-04 03:13:41
GoVersion: go version go1.13 linux/amd64
Race Enabled: false
TiKV Min Version: v3.0.0-60965b006877ca7234adaced7890d7b029ed1306
Check Table Before Drop: false

# strings /tidb-server | grep -E "TiDBReleaseVersion=v[0-9]+\.[0-9]+\.[0-9]+"
#

# strings /tidb-server | grep -E  "heads/refs/tags/v[0-9]+\.[0-9]+\.[0-9]+"
heads/refs/tags/v3.1.2

# strings /tidb-server | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$'
v3.1.2

v3.0.0

# /tidb-server -V
Release Version: v3.0.0
Git Commit Hash: 60965b006877ca7234adaced7890d7b029ed1306
Git Branch: HEAD
UTC Build Time: 2019-06-28 12:14:07
GoVersion: go version go1.12 linux/amd64
Race Enabled: false
TiKV Min Version: 2.1.0-alpha.1-ff3dd160846b7d1aed9079c389fc188f7f5ea13e
Check Table Before Drop: false

# strings /tidb-server | grep -E "TiDBReleaseVersion=v[0-9]+\.[0-9]+\.[0-9]+"
# 

# strings /tidb-server | grep -E  "heads/refs/tags/v[0-9]+\.[0-9]+\.[0-9]+"
#

#  strings /tidb-server | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$'
v3.0.0
@witchcraze witchcraze added the enhancement New feature or request label Apr 10, 2024
@tgerla tgerla added the good-first-issue Good for newcomers label Apr 25, 2024
@tgerla tgerla moved this to Backlog in OSS Apr 25, 2024
@kzantow kzantow moved this from Backlog to Ready in OSS Apr 25, 2024
@witchcraze
Copy link
Contributor Author

Now, go-module version seems proper, I'll close this issue

$ syft pingcap/tidb | grep tidb
 ✔ Loaded image                                                                                           pingcap/tidb:latest   ✔ Parsed image                                       sha256:bd253ee807c67f8c25e71d2d8c33368f7c336f7b638c7051c81e263b47077cdd
 ✔ Cataloged contents                                        f1a3d6f86587718b021c0590b10e978b7721076fef23e58197e8631524e98405     ├── ✔ Packages                        [324 packages]
   ├── ✔ File digests                    [6,199 files]
   ├── ✔ File metadata                   [6,199 locations]
   └── ✔ Executables                     [590 executables]
github.com/pingcap/tidb                                     v7.5.1                                 go-module

@github-project-automation github-project-automation bot moved this from Ready to Done in OSS Jul 26, 2024
@BrewTestBot BrewTestBot mentioned this issue Jul 30, 2024
Merged
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
enhancement New feature or request good-first-issue Good for newcomers
Projects
OSS
Archived in project
Milestone
No milestone
Development

No branches or pull requests
2 participants
@tgerla @witchcraze