Skip to content

Improve git security settings #10486

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
daniel-mohedano wants to merge 4 commits into
base: master
Choose a base branch
from
Draft

Improve git security settings #10486

daniel-mohedano wants to merge 4 commits into from
+190 −139

Conversation

@daniel-mohedano
Copy link
Contributor

@daniel-mohedano daniel-mohedano commented Jan 30, 2026 •
edited
Loading

What Does This Do

  • Improves the git security settings by passing -c safe.directory=... as config in all git commands instead of adding it with git config --global --add safe.directory ...
  • It now traverses up from the potential root to ensure it finds a .git directory or file.

Motivation

The previous approach, to avoid "dubious ownership" errors, actually added a new global git config option every single time that code run, causing config pollution.

Contributor Checklist

Jira ticket: SDTEST-3224

@daniel-mohedano daniel-mohedano added type: enhancement Enhancements and improvements comp: ci visibility Continuous Integration Visibility labels Jan 30, 2026
@cit-pr-commenter-54b7da
Copy link

cit-pr-commenter-54b7da bot commented Feb 3, 2026 •
edited
Loading

Test Environment - sbt-scalatest

Job Status: success

Scenario Overhead (%)
agent 57.57
agentEvpProxy 57.60

@cit-pr-commenter-54b7da
Copy link

cit-pr-commenter-54b7da bot commented Feb 3, 2026 •
edited
Loading

Test Environment - pass4s

Job Status: success

Scenario Overhead (%)
agent 10.84
agentless 7.85
agentlessCodeCoverage 17.85

@cit-pr-commenter-54b7da
Copy link

cit-pr-commenter-54b7da bot commented Feb 3, 2026 •
edited
Loading

Test Environment - nebula-release-plugin

Job Status: success

Scenario Overhead (%)
agent 37.40
agentless 36.35
agentlessCodeCoverage 46.45
agentlessLineCoverage 76.95

@cit-pr-commenter-54b7da
Copy link

cit-pr-commenter-54b7da bot commented Feb 3, 2026 •
edited
Loading

Test Environment - reactive-streams-jvm

Job Status: success

Scenario Overhead (%)
agent 21.29
agentless 18.11
agentlessCodeCoverage 19.75
agentlessLineCoverage 29.57

@cit-pr-commenter-54b7da
Copy link

cit-pr-commenter-54b7da bot commented Feb 3, 2026 •
edited
Loading

Test Environment - netflix-zuul

Job Status: success

Scenario Overhead (%)
agent 90.95
agentless 84.55
agentlessCodeCoverage 99.90
agentlessLineCoverage 113.82

@cit-pr-commenter-54b7da
Copy link

cit-pr-commenter-54b7da bot commented Feb 3, 2026 •
edited
Loading

Test Environment - sonar-kotlin

Job Status: success

Scenario Overhead (%)
agent 13.25
agentless 12.24
agentlessCodeCoverage 15.38
agentlessLineCoverage 19.96

@cit-pr-commenter-54b7da
Copy link

cit-pr-commenter-54b7da bot commented Feb 3, 2026 •
edited
Loading

Test Environment - jolokia

Job Status: success

Scenario Overhead (%)
agent 92.57
agentless 89.49
agentlessCodeCoverage 97.02
agentlessLineCoverage 97.48

@cit-pr-commenter-54b7da
Copy link

cit-pr-commenter-54b7da bot commented Feb 3, 2026 •
edited
Loading

Test Environment - okhttp

Job Status: success

Scenario Overhead (%)
agent 17.86
agentless 17.73
agentlessCodeCoverage 20.62
agentlessLineCoverage 37.23

@cit-pr-commenter-54b7da
Copy link

cit-pr-commenter-54b7da bot commented Feb 3, 2026 •
edited
Loading

Test Environment - spring_boot

Job Status: success

Scenario Overhead (%)
agent 15.14
agentless 7.96
agentlessCodeCoverage 11.74
agentlessLineCoverage 31.18

@cit-pr-commenter-54b7da
Copy link

cit-pr-commenter-54b7da bot commented Feb 3, 2026 •
edited
Loading

Test Environment - sonar-java

Job Status: success

Scenario Overhead (%)
agent -1.03
agentless -0.78
agentlessCodeCoverage 100.83
agentlessLineCoverage 150.32

@pr-commenter
Copy link

pr-commenter bot commented Feb 3, 2026

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master daniel.mohedano/git-security-settings
git_commit_date 1769781662 1770120157
git_commit_sha 67d83b3 b59fa69
release_version 1.59.0-SNAPSHOT~67d83b3d5a 1.59.0-SNAPSHOT~b59fa697e4
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1770121976 1770121976
ci_job_id 1396663459 1396663459
ci_pipeline_id 94296867 94296867
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-qivjugat 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-qivjugat 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 64 metrics, 7 unstable metrics.

Startup time reports for petclinic 
gantt
    title petclinic - global startup overhead: candidate=1.59.0-SNAPSHOT~b59fa697e4, baseline=1.59.0-SNAPSHOT~67d83b3d5a

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.059 s) : 0, 1059183
Total [baseline] (10.955 s) : 0, 10955324
Agent [candidate] (1.058 s) : 0, 1057579
Total [candidate] (10.944 s) : 0, 10943624
section appsec
Agent [baseline] (1.235 s) : 0, 1234617
Total [baseline] (11.014 s) : 0, 11014016
Agent [candidate] (1.235 s) : 0, 1234616
Total [candidate] (11.042 s) : 0, 11041779
section iast
Agent [baseline] (1.228 s) : 0, 1228092
Total [baseline] (11.131 s) : 0, 11130607
Agent [candidate] (1.227 s) : 0, 1227103
Total [candidate] (11.211 s) : 0, 11211043
section profiling
Agent [baseline] (1.186 s) : 0, 1186467
Total [baseline] (10.904 s) : 0, 10903984
Agent [candidate] (1.187 s) : 0, 1186555
Total [candidate] (10.838 s) : 0, 10837578
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.059 s -
Agent appsec 1.235 s 175.434 ms (16.6%)
Agent iast 1.228 s 168.909 ms (15.9%)
Agent profiling 1.186 s 127.284 ms (12.0%)
Total tracing 10.955 s -
Total appsec 11.014 s 58.693 ms (0.5%)
Total iast 11.131 s 175.283 ms (1.6%)
Total profiling 10.904 s -51.339 ms (-0.5%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.058 s -
Agent appsec 1.235 s 177.038 ms (16.7%)
Agent iast 1.227 s 169.524 ms (16.0%)
Agent profiling 1.187 s 128.976 ms (12.2%)
Total tracing 10.944 s -
Total appsec 11.042 s 98.154 ms (0.9%)
Total iast 11.211 s 267.419 ms (2.4%)
Total profiling 10.838 s -106.046 ms (-1.0%) 
gantt
    title petclinic - break down per module: candidate=1.59.0-SNAPSHOT~b59fa697e4, baseline=1.59.0-SNAPSHOT~67d83b3d5a

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.182 ms) : 0, 1182
crashtracking [candidate] (1.182 ms) : 0, 1182
BytebuddyAgent [baseline] (623.351 ms) : 0, 623351
BytebuddyAgent [candidate] (622.667 ms) : 0, 622667
AgentMeter [baseline] (28.673 ms) : 0, 28673
AgentMeter [candidate] (28.642 ms) : 0, 28642
GlobalTracer [baseline] (257.629 ms) : 0, 257629
GlobalTracer [candidate] (257.097 ms) : 0, 257097
AppSec [baseline] (33.008 ms) : 0, 33008
AppSec [candidate] (32.824 ms) : 0, 32824
Debugger [baseline] (63.249 ms) : 0, 63249
Debugger [candidate] (61.639 ms) : 0, 61639
Remote Config [baseline] (615.962 µs) : 0, 616
Remote Config [candidate] (607.942 µs) : 0, 608
Telemetry [baseline] (9.197 ms) : 0, 9197
Telemetry [candidate] (11.455 ms) : 0, 11455
Flare Poller [baseline] (6.86 ms) : 0, 6860
Flare Poller [candidate] (6.018 ms) : 0, 6018
section appsec
crashtracking [baseline] (1.184 ms) : 0, 1184
crashtracking [candidate] (1.183 ms) : 0, 1183
BytebuddyAgent [baseline] (654.633 ms) : 0, 654633
BytebuddyAgent [candidate] (653.618 ms) : 0, 653618
AgentMeter [baseline] (11.863 ms) : 0, 11863
AgentMeter [candidate] (11.873 ms) : 0, 11873
GlobalTracer [baseline] (257.773 ms) : 0, 257773
GlobalTracer [candidate] (258.145 ms) : 0, 258145
IAST [baseline] (25.257 ms) : 0, 25257
IAST [candidate] (25.393 ms) : 0, 25393
AppSec [baseline] (167.044 ms) : 0, 167044
AppSec [candidate] (168.066 ms) : 0, 168066
Debugger [baseline] (67.804 ms) : 0, 67804
Debugger [candidate] (67.524 ms) : 0, 67524
Remote Config [baseline] (660.066 µs) : 0, 660
Remote Config [candidate] (648.834 µs) : 0, 649
Telemetry [baseline] (9.271 ms) : 0, 9271
Telemetry [candidate] (9.24 ms) : 0, 9240
Flare Poller [baseline] (3.666 ms) : 0, 3666
Flare Poller [candidate] (3.588 ms) : 0, 3588
section iast
crashtracking [baseline] (1.201 ms) : 0, 1201
crashtracking [candidate] (1.168 ms) : 0, 1168
BytebuddyAgent [baseline] (791.921 ms) : 0, 791921
BytebuddyAgent [candidate] (791.14 ms) : 0, 791140
AgentMeter [baseline] (11.165 ms) : 0, 11165
AgentMeter [candidate] (11.175 ms) : 0, 11175
GlobalTracer [baseline] (248.243 ms) : 0, 248243
GlobalTracer [candidate] (248.373 ms) : 0, 248373
IAST [baseline] (26.958 ms) : 0, 26958
IAST [candidate] (26.841 ms) : 0, 26841
AppSec [baseline] (32.045 ms) : 0, 32045
AppSec [candidate] (34.614 ms) : 0, 34614
Debugger [baseline] (68.442 ms) : 0, 68442
Debugger [candidate] (65.861 ms) : 0, 65861
Remote Config [baseline] (545.683 µs) : 0, 546
Remote Config [candidate] (550.754 µs) : 0, 551
Telemetry [baseline] (8.555 ms) : 0, 8555
Telemetry [candidate] (8.511 ms) : 0, 8511
Flare Poller [baseline] (3.518 ms) : 0, 3518
Flare Poller [candidate] (3.491 ms) : 0, 3491
section profiling
crashtracking [baseline] (1.223 ms) : 0, 1223
crashtracking [candidate] (1.211 ms) : 0, 1211
BytebuddyAgent [baseline] (677.207 ms) : 0, 677207
BytebuddyAgent [candidate] (678.201 ms) : 0, 678201
AgentMeter [baseline] (8.629 ms) : 0, 8629
AgentMeter [candidate] (8.623 ms) : 0, 8623
GlobalTracer [baseline] (217.453 ms) : 0, 217453
GlobalTracer [candidate] (216.894 ms) : 0, 216894
AppSec [baseline] (32.379 ms) : 0, 32379
AppSec [candidate] (32.284 ms) : 0, 32284
Debugger [baseline] (67.936 ms) : 0, 67936
Debugger [candidate] (67.726 ms) : 0, 67726
Remote Config [baseline] (607.513 µs) : 0, 608
Remote Config [candidate] (595.93 µs) : 0, 596
Telemetry [baseline] (8.746 ms) : 0, 8746
Telemetry [candidate] (8.652 ms) : 0, 8652
Flare Poller [baseline] (3.712 ms) : 0, 3712
Flare Poller [candidate] (3.737 ms) : 0, 3737
ProfilingAgent [baseline] (98.804 ms) : 0, 98804
ProfilingAgent [candidate] (98.754 ms) : 0, 98754
Profiling [baseline] (99.381 ms) : 0, 99381
Profiling [candidate] (99.318 ms) : 0, 99318
Loading
Startup time reports for insecure-bank 
gantt
    title insecure-bank - global startup overhead: candidate=1.59.0-SNAPSHOT~b59fa697e4, baseline=1.59.0-SNAPSHOT~67d83b3d5a

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.055 s) : 0, 1054952
Total [baseline] (8.7 s) : 0, 8700386
Agent [candidate] (1.06 s) : 0, 1059899
Total [candidate] (8.759 s) : 0, 8758662
section iast
Agent [baseline] (1.238 s) : 0, 1238064
Total [baseline] (9.429 s) : 0, 9428896
Agent [candidate] (1.234 s) : 0, 1234417
Total [candidate] (9.41 s) : 0, 9409799
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.055 s -
Agent iast 1.238 s 183.112 ms (17.4%)
Total tracing 8.7 s -
Total iast 9.429 s 728.51 ms (8.4%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.06 s -
Agent iast 1.234 s 174.519 ms (16.5%)
Total tracing 8.759 s -
Total iast 9.41 s 651.137 ms (7.4%) 
gantt
    title insecure-bank - break down per module: candidate=1.59.0-SNAPSHOT~b59fa697e4, baseline=1.59.0-SNAPSHOT~67d83b3d5a

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.172 ms) : 0, 1172
crashtracking [candidate] (1.19 ms) : 0, 1190
BytebuddyAgent [baseline] (622.7 ms) : 0, 622700
BytebuddyAgent [candidate] (624.633 ms) : 0, 624633
AgentMeter [baseline] (28.641 ms) : 0, 28641
AgentMeter [candidate] (28.709 ms) : 0, 28709
GlobalTracer [baseline] (256.497 ms) : 0, 256497
GlobalTracer [candidate] (257.689 ms) : 0, 257689
AppSec [baseline] (32.699 ms) : 0, 32699
AppSec [candidate] (32.793 ms) : 0, 32793
Debugger [baseline] (61.093 ms) : 0, 61093
Debugger [candidate] (61.697 ms) : 0, 61697
Remote Config [baseline] (617.986 µs) : 0, 618
Remote Config [candidate] (624.428 µs) : 0, 624
Telemetry [baseline] (9.172 ms) : 0, 9172
Telemetry [candidate] (9.231 ms) : 0, 9231
Flare Poller [baseline] (6.928 ms) : 0, 6928
Flare Poller [candidate] (7.871 ms) : 0, 7871
section iast
crashtracking [baseline] (1.191 ms) : 0, 1191
crashtracking [candidate] (1.19 ms) : 0, 1190
BytebuddyAgent [baseline] (799.477 ms) : 0, 799477
BytebuddyAgent [candidate] (797.059 ms) : 0, 797059
AgentMeter [baseline] (11.442 ms) : 0, 11442
AgentMeter [candidate] (11.266 ms) : 0, 11266
GlobalTracer [baseline] (250.476 ms) : 0, 250476
GlobalTracer [candidate] (249.835 ms) : 0, 249835
IAST [baseline] (27.147 ms) : 0, 27147
IAST [candidate] (27.033 ms) : 0, 27033
AppSec [baseline] (33.007 ms) : 0, 33007
AppSec [candidate] (33.893 ms) : 0, 33893
Debugger [baseline] (67.083 ms) : 0, 67083
Debugger [candidate] (65.953 ms) : 0, 65953
Remote Config [baseline] (559.822 µs) : 0, 560
Remote Config [candidate] (551.187 µs) : 0, 551
Telemetry [baseline] (8.635 ms) : 0, 8635
Telemetry [candidate] (8.536 ms) : 0, 8536
Flare Poller [baseline] (3.54 ms) : 0, 3540
Flare Poller [candidate] (3.524 ms) : 0, 3524
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master daniel.mohedano/git-security-settings
git_commit_date 1769781662 1770120157
git_commit_sha 67d83b3 b59fa69
release_version 1.59.0-SNAPSHOT~67d83b3d5a 1.59.0-SNAPSHOT~b59fa697e4
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1770122467 1770122467
ci_job_id 1396663461 1396663461
ci_pipeline_id 94296867 94296867
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-pj8gea2c 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-pj8gea2c 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 1 performance improvements and 1 performance regressions! Performance is the same for 19 metrics, 15 unstable metrics.

scenario Δ mean agg_http_req_duration_p50 Δ mean agg_http_req_duration_p95 Δ mean throughput candidate mean agg_http_req_duration_p50 candidate mean agg_http_req_duration_p95 candidate mean throughput baseline mean agg_http_req_duration_p50 baseline mean agg_http_req_duration_p95 baseline mean throughput
scenario:load:insecure-bank:profiling:high_load better
[-191.260µs; -70.588µs] or [-11.037%; -4.073%]		 unstable
[-1053.710µs; -182.273µs] or [-20.749%; -3.589%]		 unstable
[-42.122op/s; +539.934op/s] or [-2.030%; +26.021%]		 1.602ms 4.460ms 2323.875op/s 1.733ms 5.078ms 2074.969op/s
scenario:load:petclinic:profiling:high_load worse
[+368.227µs; +833.359µs] or [+2.040%; +4.618%]		 unsure
[+361.994µs; +1591.347µs] or [+1.238%; +5.442%]		 unstable
[-32.435op/s; +17.310op/s] or [-12.846%; +6.856%]		 18.648ms 30.219ms 244.938op/s 18.047ms 29.242ms 252.500op/s
Request duration reports for petclinic 
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.59.0-SNAPSHOT~b59fa697e4, baseline=1.59.0-SNAPSHOT~67d83b3d5a
    dateFormat X
    axisFormat %s
section baseline
no_agent (17.948 ms) : 17766, 18129
.   : milestone, 17948,
appsec (18.399 ms) : 18212, 18586
.   : milestone, 18399,
code_origins (17.748 ms) : 17572, 17923
.   : milestone, 17748,
iast (17.403 ms) : 17233, 17574
.   : milestone, 17403,
profiling (18.48 ms) : 18298, 18661
.   : milestone, 18480,
tracing (17.859 ms) : 17681, 18038
.   : milestone, 17859,
section candidate
no_agent (18.195 ms) : 18010, 18381
.   : milestone, 18195,
appsec (18.345 ms) : 18158, 18531
.   : milestone, 18345,
code_origins (17.803 ms) : 17627, 17979
.   : milestone, 17803,
iast (17.508 ms) : 17335, 17680
.   : milestone, 17508,
profiling (19.059 ms) : 18867, 19251
.   : milestone, 19059,
tracing (17.749 ms) : 17574, 17924
.   : milestone, 17749,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 17.948 ms [17.766 ms, 18.129 ms] -
appsec 18.399 ms [18.212 ms, 18.586 ms] 451.584 µs (2.5%)
code_origins 17.748 ms [17.572 ms, 17.923 ms] -199.731 µs (-1.1%)
iast 17.403 ms [17.233 ms, 17.574 ms] -544.34 µs (-3.0%)
profiling 18.48 ms [18.298 ms, 18.661 ms] 532.311 µs (3.0%)
tracing 17.859 ms [17.681 ms, 18.038 ms] -88.137 µs (-0.5%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 18.195 ms [18.01 ms, 18.381 ms] -
appsec 18.345 ms [18.158 ms, 18.531 ms] 149.381 µs (0.8%)
code_origins 17.803 ms [17.627 ms, 17.979 ms] -392.056 µs (-2.2%)
iast 17.508 ms [17.335 ms, 17.68 ms] -687.616 µs (-3.8%)
profiling 19.059 ms [18.867 ms, 19.251 ms] 863.475 µs (4.7%)
tracing 17.749 ms [17.574 ms, 17.924 ms] -445.812 µs (-2.5%)
Request duration reports for insecure-bank 
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.59.0-SNAPSHOT~b59fa697e4, baseline=1.59.0-SNAPSHOT~67d83b3d5a
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.183 ms) : 1172, 1195
.   : milestone, 1183,
iast (3.164 ms) : 3124, 3204
.   : milestone, 3164,
iast_FULL (5.898 ms) : 5838, 5958
.   : milestone, 5898,
iast_GLOBAL (3.535 ms) : 3478, 3591
.   : milestone, 3535,
profiling (2.182 ms) : 2161, 2204
.   : milestone, 2182,
tracing (1.786 ms) : 1771, 1800
.   : milestone, 1786,
section candidate
no_agent (1.181 ms) : 1169, 1193
.   : milestone, 1181,
iast (3.161 ms) : 3119, 3204
.   : milestone, 3161,
iast_FULL (5.995 ms) : 5935, 6056
.   : milestone, 5995,
iast_GLOBAL (3.475 ms) : 3425, 3525
.   : milestone, 3475,
profiling (1.94 ms) : 1924, 1957
.   : milestone, 1940,
tracing (1.795 ms) : 1780, 1810
.   : milestone, 1795,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.183 ms [1.172 ms, 1.195 ms] -
iast 3.164 ms [3.124 ms, 3.204 ms] 1.98 ms (167.3%)
iast_FULL 5.898 ms [5.838 ms, 5.958 ms] 4.714 ms (398.4%)
iast_GLOBAL 3.535 ms [3.478 ms, 3.591 ms] 2.351 ms (198.7%)
profiling 2.182 ms [2.161 ms, 2.204 ms] 998.657 µs (84.4%)
tracing 1.786 ms [1.771 ms, 1.8 ms] 602.457 µs (50.9%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.181 ms [1.169 ms, 1.193 ms] -
iast 3.161 ms [3.119 ms, 3.204 ms] 1.98 ms (167.6%)
iast_FULL 5.995 ms [5.935 ms, 6.056 ms] 4.814 ms (407.6%)
iast_GLOBAL 3.475 ms [3.425 ms, 3.525 ms] 2.294 ms (194.2%)
profiling 1.94 ms [1.924 ms, 1.957 ms] 759.117 µs (64.3%)
tracing 1.795 ms [1.78 ms, 1.81 ms] 613.714 µs (52.0%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master daniel.mohedano/git-security-settings
git_commit_date 1769781662 1770120157
git_commit_sha 67d83b3 b59fa69
release_version 1.59.0-SNAPSHOT~67d83b3d5a 1.59.0-SNAPSHOT~b59fa697e4
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1770122315 1770122315
ci_job_id 1396663462 1396663462
ci_pipeline_id 94296867 94296867
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-obrwy468 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-obrwy468 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for biojava 
gantt
    title biojava - execution time [CI 0.99] : candidate=1.59.0-SNAPSHOT~b59fa697e4, baseline=1.59.0-SNAPSHOT~67d83b3d5a
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.038 s) : 15038000, 15038000
.   : milestone, 15038000,
appsec (15.14 s) : 15140000, 15140000
.   : milestone, 15140000,
iast (18.492 s) : 18492000, 18492000
.   : milestone, 18492000,
iast_GLOBAL (17.793 s) : 17793000, 17793000
.   : milestone, 17793000,
profiling (14.996 s) : 14996000, 14996000
.   : milestone, 14996000,
tracing (14.642 s) : 14642000, 14642000
.   : milestone, 14642000,
section candidate
no_agent (15.495 s) : 15495000, 15495000
.   : milestone, 15495000,
appsec (14.934 s) : 14934000, 14934000
.   : milestone, 14934000,
iast (18.107 s) : 18107000, 18107000
.   : milestone, 18107000,
iast_GLOBAL (17.662 s) : 17662000, 17662000
.   : milestone, 17662000,
profiling (14.754 s) : 14754000, 14754000
.   : milestone, 14754000,
tracing (14.954 s) : 14954000, 14954000
.   : milestone, 14954000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.038 s [15.038 s, 15.038 s] -
appsec 15.14 s [15.14 s, 15.14 s] 102.0 ms (0.7%)
iast 18.492 s [18.492 s, 18.492 s] 3.454 s (23.0%)
iast_GLOBAL 17.793 s [17.793 s, 17.793 s] 2.755 s (18.3%)
profiling 14.996 s [14.996 s, 14.996 s] -42.0 ms (-0.3%)
tracing 14.642 s [14.642 s, 14.642 s] -396.0 ms (-2.6%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.495 s [15.495 s, 15.495 s] -
appsec 14.934 s [14.934 s, 14.934 s] -561.0 ms (-3.6%)
iast 18.107 s [18.107 s, 18.107 s] 2.612 s (16.9%)
iast_GLOBAL 17.662 s [17.662 s, 17.662 s] 2.167 s (14.0%)
profiling 14.754 s [14.754 s, 14.754 s] -741.0 ms (-4.8%)
tracing 14.954 s [14.954 s, 14.954 s] -541.0 ms (-3.5%)
Execution time for tomcat 
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.59.0-SNAPSHOT~b59fa697e4, baseline=1.59.0-SNAPSHOT~67d83b3d5a
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.48 ms) : 1468, 1491
.   : milestone, 1480,
appsec (3.707 ms) : 3487, 3927
.   : milestone, 3707,
iast (2.269 ms) : 2200, 2338
.   : milestone, 2269,
iast_GLOBAL (2.316 ms) : 2246, 2386
.   : milestone, 2316,
profiling (2.091 ms) : 2037, 2146
.   : milestone, 2091,
tracing (2.067 ms) : 2014, 2121
.   : milestone, 2067,
section candidate
no_agent (1.476 ms) : 1464, 1487
.   : milestone, 1476,
appsec (3.7 ms) : 3484, 3916
.   : milestone, 3700,
iast (2.262 ms) : 2193, 2331
.   : milestone, 2262,
iast_GLOBAL (2.309 ms) : 2240, 2378
.   : milestone, 2309,
profiling (2.092 ms) : 2037, 2146
.   : milestone, 2092,
tracing (2.076 ms) : 2023, 2129
.   : milestone, 2076,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.48 ms [1.468 ms, 1.491 ms] -
appsec 3.707 ms [3.487 ms, 3.927 ms] 2.227 ms (150.5%)
iast 2.269 ms [2.2 ms, 2.338 ms] 789.422 µs (53.3%)
iast_GLOBAL 2.316 ms [2.246 ms, 2.386 ms] 836.137 µs (56.5%)
profiling 2.091 ms [2.037 ms, 2.146 ms] 611.562 µs (41.3%)
tracing 2.067 ms [2.014 ms, 2.121 ms] 587.473 µs (39.7%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.476 ms [1.464 ms, 1.487 ms] -
appsec 3.7 ms [3.484 ms, 3.916 ms] 2.224 ms (150.7%)
iast 2.262 ms [2.193 ms, 2.331 ms] 785.979 µs (53.3%)
iast_GLOBAL 2.309 ms [2.24 ms, 2.378 ms] 833.408 µs (56.5%)
profiling 2.092 ms [2.037 ms, 2.146 ms] 615.831 µs (41.7%)
tracing 2.076 ms [2.023 ms, 2.129 ms] 600.304 µs (40.7%)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

comp: ci visibility Continuous Integration Visibility type: enhancement Enhancements and improvements

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@daniel-mohedano