fix: parallelize inventory verification

Inventory verification is an expensive step and can be parallelized.

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>

pkg/fs/verify.go

@@ -6,6 +6,8 @@ import (
 	"path/filepath"
 	"strconv"
 	"strings"
+	"sync"
+	"sync/atomic"
 
 	"github.com/rs/zerolog/log"
 	"sigs.k8s.io/bom/pkg/spdx"
@@ -92,7 +94,8 @@ func Verify(input, inventory, missing string) error {
 
 	mdoc := bom.NewDocument("", "")
 	mdoc.Name = "missing-files-document"
-	mcount := 0
+	var mcount atomic.Uint64
+	var wg sync.WaitGroup
 
 	for _, entry := range inv.Entries {
 		mode, err := strconv.ParseInt(entry.Mode, 8, 32)
@@ -106,26 +109,35 @@ func Verify(input, inventory, missing string) error {
 			continue
 		}
 
-		if err := checkBOM(input, entry.Path); err != nil {
-			log.Error().Err(err).Str("path", entry.Path).Msg("inventory verify failed")
-			mcount++
-			sfile := spdx.NewFile()
-			sfile.SetEntity(
-				&spdx.Entity{
-					Name:     entry.Path,
-					Checksum: map[string]string{"SHA256": strings.Split(entry.Checksum, ":")[1]},
-				},
-			)
-
-			if err := mdoc.AddFile(sfile); err != nil {
-				log.Error().Err(err).Msg("unable to add file to package")
-
-				return err
+		wg.Add(1)
+
+		go func(entry Entry) error {
+			defer wg.Done()
+			if err := checkBOM(input, entry.Path); err != nil {
+				log.Error().Err(err).Str("path", entry.Path).Msg("inventory verify failed")
+				mcount.Add(1)
+				sfile := spdx.NewFile()
+				sfile.SetEntity(
+					&spdx.Entity{
+						Name:     entry.Path,
+						Checksum: map[string]string{"SHA256": strings.Split(entry.Checksum, ":")[1]},
+					},
+				)
+
+				if err := mdoc.AddFile(sfile); err != nil {
+					log.Error().Err(err).Msg("unable to add file to package")
+
+					return err
+				}
 			}
-		}
+
+			return nil
+		}(entry)
 	}
 
-	if mcount != 0 {
+	wg.Wait()
+
+	if mcount.Load() != 0 {
 		if missing != "" {
 			if err := bom.WriteDocument(mdoc, missing); err != nil {
 				log.Error().Err(err).Str("path", missing).Msg("unable to writing missing entries")