Skip to content

Conversation

@egibs
Copy link
Member

@egibs egibs commented Nov 3, 2025

This PR updates yara-x to 1.9.0 and uses the newly-added ScanFile method as opposed to the original Scan method which only supported a byte slice.

This allows yara-x to handle all of the memory mapping/file reading and cleans up a decent bit of code.

We still need the file contents for checksum calculations and report generation, so I updated the original syscall.Mmap+bytes.Clone functionality with bytes.Buffer+io.CopyBuffer instead.

@egibs egibs enabled auto-merge (squash) November 3, 2025 15:02
@egibs egibs merged commit 5f44f86 into chainguard-dev:main Nov 3, 2025
13 checks passed
@egibs egibs deleted the update-yara-x-1.9.0 branch November 4, 2025 14:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants