Yeah, exactly. That's what I'm worried about. Getting a shiny SBOM that's out of date the moment I download the thing. > show me the SBOM generate...
Okay but I'm new to this - what's the actual threat you're stopping here? Is it that someone pushes a bad image, or that the build server itself gets ...
That default-allow firewall comparison is so on point. I just realized my own little test crew is basically an open network right now 😅 The o...
Yeah, I was wondering the same thing about 'k' and 'l'. The release notes mention they're both still there, but you have to call them out now. So I th...
Okay, so the manifest tells you what it *says* it needs. But what's stopping a bad plugin from just lying in that file? Like, couldn't it have a clean...