Skip to content

feat(facade): check repo size and enforce clone limit before cloning (#458) - #459

Open
Dipro-cyber wants to merge 5 commits into
chaoss:mainfrom
Dipro-cyber:feat/enforce-repo-clone-size-limit-458
Open

Dipro-cyber wants to merge 5 commits into
chaoss:mainfrom
Dipro-cyber:feat/enforce-repo-clone-size-limit-458

Conversation

@Dipro-cyber

Copy link
Copy Markdown
Contributor

Description
Some git repositories are exceptionally large, which can rapidly exhaust local disk space when cloned. This PR introduces a configurable maximum repository clone size limit (max_clone_size_kb) and safety margin (clone_size_safety_margin) in CollectOSS.

Before running git clone, CollectOSS queries platform APIs (GitHub REST API or GitLab API) to obtain reported repository size stats and computes estimated_size_kb = reported_size_kb * (1 + safety_margin). If the estimated clone size exceeds max_clone_size_kb, cloning is skipped and the repository collection status is set to Failed Clone.

This PR fixes #458

Notes for Reviewers

  • Added max_clone_size_kb (default 0, disabled) and clone_size_safety_margin (default 0.5, 50% margin) to Facade config in collectoss/application/config.py and FacadeHelper.
  • Added check_repo_size_limit() and pre-clone enforcement logic in collectoss/tasks/git/util/facade_worker/facade_worker/repofetch.py.
  • Added comprehensive unit tests in tests/test_tasks/test_git/test_repo_size_limit.py.

Signed commits

  • Yes, I signed my commits.

Generative AI disclosure

  • This contribution was assisted or created by Generative AI tools.
    • What tools were used? Google Antigravity
    • How were these tools used? Code implementation, unit testing, and drafting PR description.
    • Did you review these outputs before submitting this PR? Yes

@Dipro-cyber
Dipro-cyber requested a review from MoralCode as a code owner August 26, 2026 06:27
@Dipro-cyber
Dipro-cyber force-pushed the feat/enforce-repo-clone-size-limit-458 branch from 9ab30b8 to b0cb8fe Compare August 26, 2026 07:00
@MoralCode

Copy link
Copy Markdown
Contributor

im a little confused on the theory of how your safety margin system is meant to work. The original idea for that is because the size as github reports it is very likely not accurate to the actual size of the whole directory that you get after running git clone.

I have other branches that are very work-in-progress for refactoring a lot of CollectOSS to use pygit2 rather than shelling out to a git subprocess (for speed/performance). I think if we wanted the size limit configuration we offer to users to be an actual/comparable measure to real on-disk first-clone size, maybe we should see if that library gives us a way to query the actual clone size of a repo.

Happy to chat on slack about this too, im very curious what you find

@Dipro-cyber

Copy link
Copy Markdown
Contributor Author

@MoralCode thank u for the context sir, sorry i was a bit inactive. the github api size field is from a bare repo so it can differ significantly from the actual clone size. happy to revisit the safety margin approach once the pygit2 refactor lands, since that library likely has a way to get the actual disk usage after clone. for now, should i simplify this to just use the raw github-reported size without a safety margin, and let users set the limit knowing it's an approximation? that would make the behavior more predictable while still solving the core disk space problem.

@MoralCode

Copy link
Copy Markdown
Contributor

I think the main idea is to figure out the disk space before the clone so we can avoid cloning if its too big.

Maybe thats where the conversation in #49 could help (I.e. if we migrated CollectOSS to use bare clones)

…ent E2E worker timeout

Signed-off-by: Diptesh Roy <droy88333@gmail.com>
Per MoralCode's review feedback, the safety margin concept was confusing
because the GitHub/GitLab API size field is already an approximation
(measured from a bare repo, not an actual clone). Adding a multiplier on
top of an already-inaccurate value made the limit unpredictable.

Simplified to compare the raw reported size directly against
max_clone_size_kb. Users set the limit knowing it's an approximation of
the bare repo size, which is the most honest and predictable behavior.

Also removes clone_size_safety_margin from config and FacadeHelper.

Signed-off-by: Diptesh Roy <droy88333@gmail.com>
@Dipro-cyber
Dipro-cyber force-pushed the feat/enforce-repo-clone-size-limit-458 branch from 4af2829 to 4cc4d18 Compare September 24, 2026 17:10
@Dipro-cyber

Copy link
Copy Markdown
Contributor Author

@MoralCode sir can u check this once, the new feature by @drkrillo has been a help here!

@MoralCode

Copy link
Copy Markdown
Contributor

The underlying issue has had additional notes added since this PR was filed.

The additional notes Include a way to estimate the size of a checkout (rather than using a fudge factor).

This, combined with the bare size of a git repo should give a decent estimate of repo size

Could you update this PR to account for that more precise method of checking the size?

@Dipro-cyber

Copy link
Copy Markdown
Contributor Author

The underlying issue has had additional notes added since this PR was filed.

The additional notes Include a way to estimate the size of a checkout (rather than using a fudge factor).

This, combined with the bare size of a git repo should give a decent estimate of repo size

Could you update this PR to account for that more precise method of checking the size?

Oh yes sure sir, I will check out the notes.

Per MoralCode's research, the GitHub API 'size' field alone underestimates
by ~4% because it only measures the bare repo. Adding the working tree
file size (sum of all blob sizes from /git/trees/HEAD?recursive=1) gives
a much more accurate estimate of actual on-disk clone size.

If the tree is truncated (very large repo), falls back to bare size only.
Updated tests to cover the combined estimation logic.

Signed-off-by: Diptesh Roy <droy88333@gmail.com>
@Dipro-cyber

Copy link
Copy Markdown
Contributor Author

@MoralCode the new commit now uses the combined bare repo size + file tree blob sizes for github repos. falls back to bare size only if the tree is truncated. also updated tests to cover the combined logic.

@MoralCode

Copy link
Copy Markdown
Contributor

Wdym if the tree is truncated?

@Dipro-cyber

Copy link
Copy Markdown
Contributor Author

Wdym if the tree is truncated?

sir the github git tree API (/git/trees/HEAD?recursive=1) returns truncated: true for very large repos where the tree has too many entries to return in a single response. in that case we can't sum all blob sizes, so we fall back to just the bare repo size from the metadata api. for most repos this won't happen, github truncates at ~100,000 tree entries.

Comment thread collectoss/application/config.py Outdated
- Default max_clone_size_kb changed from 0 (disabled) to 5242880 KB (5 GB)
  as suggested by MoralCode — provides a sensible out-of-the-box limit
- Reverted contributor_interface.py and tasks.py to upstream — those
  changes are unrelated to the repo size limit feature

Signed-off-by: Diptesh Roy <droy88333@gmail.com>
Comment on lines +90 to +100
def test_is_valid_searchable_email(self):
from collectoss.tasks.github.facade_github.contributor_interfaceable.contributor_interface import is_valid_searchable_email
self.assertTrue(is_valid_searchable_email("user@example.org"))
self.assertTrue(is_valid_searchable_email("john.doe@company.co.uk"))

self.assertFalse(is_valid_searchable_email("root@augur"))
self.assertFalse(is_valid_searchable_email("michaelwoodruff@mwc-021001.dhcp.missouri.edu"))
self.assertFalse(is_valid_searchable_email("user@localhost"))
self.assertFalse(is_valid_searchable_email("invalid_email"))
self.assertFalse(is_valid_searchable_email(""))
self.assertFalse(is_valid_searchable_email(None))

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is unrelated

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Check repo size and enforce a limit before cloning

2 participants