[qa] Stress test blint by running against /usr/bin, /usr/lib etc

[prabhu]

Running it against such large directories should result in a good quality component list and dependency tree. It will help identify performance bottlenecks etc.

[ittach1]

I ran the blint tool on the /usr/bin and /usr/lib directories, and it performed well! It produced JSON output files for all the binaries along with the security findings in both JSON and HTML format.

Unfortunately, the SBOM generation encountered a few failures. The process got killed automatically after some time upon execution.

[prabhu]

@ittach1 how is this looking with the latest version of blint?

[reactive-firewall]

I noticed this task is more than a year out-of-date, and wanted to know the answer of the current state myself.

Of-course I've done this on a fork which anyone interested may checkout over there.

As this is supposed to be a task for new-contributors (e.g. good-first-issue) I've left many easy TODO style chores/easy-wins like adding additional paths to the benchmark testing, or cleaning up the proof-of-concept test logic implementation. So hopefully this can remain open to other contributors to still work on, while still providing meaningful insights to the core engineering team of the blint project via CI-CD integration.

---

@prabhu Here's how this is looking with the latest blint (circa August 15, 2025):

https://github.com/reactive-firewall/patch-blint-benchmark/actions/runs/16997921119/job/48192976498

I 'll submit a PR for this.

[reactive-firewall]

@prabhu,

• As of the latest commit (e.g., c9eefd1 ) the workflow from PR Ci blint benchmark prototype workflow #146 can be run with zero-configuration (it will now just use fixed defaults, as a fallback, for target python version) -- this should resolve the issue previously seen in the PR ( Ci blint benchmark prototype workflow #146 )

Or you can again view the latest run (on my fork circa September 2025):

https://github.com/reactive-firewall/patch-blint-benchmark/actions/runs/17963020226

🙇 thanks for taking the time to read this. Hopefully this helps.