Always thought collecting BOMs for your apps to get alerted whenever a CVE >x dependency got pulled into your infrastructure was enterprise-level security theatre but considering the new reality, it m...
Pulling and scanning images referenced by renovate PRs now so they don't even hit the cluster.