Chapter 2. Data importers
A Red Hat Trusted Profile Analyzer data importer lets you fetch advisory, vulnerability, and SBOM data from multiple remote sources efficiently for analysis. Then RHTPA uses this data to give you more insights when analyzing your Software Bill of Materials (SBOM) and Common Security Advisory Framework (CSAF) documents.
- Available importers
By default, RHTPA comes configured with the following importer sources:
- Red Hat CSAFs
- Red Hat SBOMs
- Common Vulnerabilities and Exposures (CVE) list version 5
- GitHub advisory database
- Quay
By default, the Red Hat CSAF, Red Hat SBOM, and Quay data importers are disabled. These importers can run a long time before finishing, but you can enable any of these data importers at anytime. The Quay data importer scans the Quay registry looking for existing SBOMs for RHTPA to analyze.
- Scheduling
- By default, the set schedule for each importer source to run is 1 day. This means an enabled importer source runs once a day. After a successful initial running of the importer, the next scheduled run is 24 hours from the time the importer job finished.
- Computing resources
Computing resources, and setting limitations on those resources in Red Hat OpenShift Container Platform is important to ensure the application runs stable and performs as expected. The default resource request is 1 CPU and 8 GB of RAM, for both the importer and API server deployments. There are no resource limits by default.
You can either reduce the resource requirements, at the cost of stability, or give more resources to the cluster, supporting the workload. Pods can fail to start, or become stuck in a "Pending" state, if computing requirements are not adequate to support the workload.