From f61abad29a2cac0cde0441a1e217adfebafd2d41 Mon Sep 17 00:00:00 2001 From: Matthias Bertschy Date: Thu, 26 Mar 2026 15:46:33 +0100 Subject: [PATCH 1/2] fix: skip processing for TS profiles based on annotations Signed-off-by: Matthias Bertschy --- utils/containerprofile.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/utils/containerprofile.go b/utils/containerprofile.go index 502d39f..dd375cf 100644 --- a/utils/containerprofile.go +++ b/utils/containerprofile.go @@ -26,6 +26,9 @@ func SkipContainerProfile(annotations map[string]string) (bool, error) { return true, fmt.Errorf("no annotations") // skip } + if _, ok := annotations[helpersv1.ReportSeriesIdMetadataKey]; ok { + return true, nil // skip TS profiles + } if status, ok := annotations[helpersv1.StatusMetadataKey]; ok && !slices.Contains(ann, status) { return true, fmt.Errorf("invalid status") } From 8f670a8310603ff210ae5077d573f38a327771c7 Mon Sep 17 00:00:00 2001 From: Matthias Bertschy Date: Thu, 26 Mar 2026 15:46:45 +0100 Subject: [PATCH 2/2] fix: skip scanning remaining containers for already processed profiles Signed-off-by: Matthias Bertschy --- mainhandler/handlerequests.go | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/mainhandler/handlerequests.go b/mainhandler/handlerequests.go index b2957ee..7b50f7a 100644 --- a/mainhandler/handlerequests.go +++ b/mainhandler/handlerequests.go @@ -405,6 +405,12 @@ func (mainHandler *MainHandler) HandleImageScanningScopedRequest(ctx context.Con continue } + noContainerSlug, _ := instanceID.GetSlug(true) + if ok := slugs[noContainerSlug]; ok { + // container profile already scanned for this workload, skip remaining containers + continue + } + // get container data containerData, err := utils.PodToContainerData(mainHandler.k8sAPI, pod, instanceID, mainHandler.config.ClusterName()) if err != nil { @@ -412,7 +418,6 @@ func (mainHandler *MainHandler) HandleImageScanningScopedRequest(ctx context.Con continue } - noContainerSlug, _ := instanceID.GetSlug(true) if profile := utils.GetContainerProfileForRelevancyScan(ctx, mainHandler.ksStorageClient, noContainerSlug, ns); profile != nil { cmd := utils.GetContainerProfileScanCommand(profile, pod)