Always thought collecting BOMs for your apps to get alerted whenever a CVE >x dependency got pulled into your infrastructure was enterprise-level security theatre but considering the new reality, it makes sense.

Getting ntfy notifications whenever one of my internet-facing apps on my cluster is at risk is quite nice.