Skip to content

Dotnet deps binary cataloger hangs #3919

@jaskaransinghdr6j

Description

@jaskaransinghdr6j

What happened:
The dotnet deps cataloger hangs while indexing packages

What you expected to happen:
The packages should be cataloged

Steps to reproduce the issue:
syft <image> --verbose

Image

[0003] INFO task completed elapsed=139.583µs task=environment-cataloger
[0003] INFO task completed elapsed=75.125µs task=conan-info-cataloger
[0003] INFO task completed elapsed=95.209µs task=rpm-db-cataloger
[0003] INFO task completed elapsed=78.5µs task=r-package-cataloger
[0003] INFO task completed elapsed=84.667µs task=javascript-package-cataloger
[0003] INFO task completed elapsed=142.208µs task=wordpress-plugins-cataloger
[0003] INFO task completed elapsed=193.708µs task=java-jvm-cataloger
[0003] INFO task completed elapsed=199.833µs task=lua-rock-cataloger
[0003] INFO task completed elapsed=209.917µs task=alpm-db-cataloger
[0003] INFO task completed elapsed=252.5µs task=apk-db-cataloger
[0003] INFO task completed elapsed=242.375µs task=php-composer-installed-cataloger
[0003] INFO task completed elapsed=311.041µs task=java-archive-cataloger
[0003] INFO task completed elapsed=211µs task=dotnet-packages-lock-cataloger
[0003] INFO task completed elapsed=283.292µs task=homebrew-cataloger
[0003] INFO task completed elapsed=237.583µs task=php-pear-serialized-cataloger
[0003] INFO task completed elapsed=289.791µs task=ruby-installed-gemspec-cataloger
[0003] INFO task completed elapsed=249.292µs task=python-installed-package-cataloger
[0003] INFO task completed elapsed=404.959µs task=bitnami-cataloger
[0003] INFO task completed elapsed=386.459µs task=portage-cataloger
[0003] INFO task completed elapsed=443.167µs task=binary-classifier-cataloger
[0003] INFO task completed elapsed=438.875µs task=linux-kernel-cataloger
[0003] INFO task completed elapsed=511.25µs task=php-interpreter-cataloger
[0003] INFO task completed elapsed=1.641458ms task=nix-cataloger
[0003] INFO task completed elapsed=12.328333ms task=dpkg-db-cataloger
[0003] INFO task completed elapsed=86.84075ms task=cargo-auditable-binary-cataloger
[0003] INFO task completed elapsed=90.717708ms task=go-module-binary-cataloger
[0003] INFO task completed elapsed=102.954208ms task=elf-binary-package-cataloger
[0003] INFO task completed elapsed=164.7105ms task=graalvm-native-image-cataloger

Anything else we need to know?:
The same dotnet images work fine in v1.22.0. I have a suspicion that the following may be the issue - NET cataloger does not always pair up PE binaries and deps.json packages, resulting in duplicate packages on some runs [#3866 #3869 @wagoodman]

Environment:
Application: syft
Version: 1.25.1
BuildDate: 2025-05-16T17:36:26Z
GitCommit: Homebrew
GitDescription: [not provided]
Platform: darwin/arm64
GoVersion: go1.24.3
Compiler: gc

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions