Skip to content
Snippets Groups Projects
Verified Commit 77f29c1c authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

removal(sbom-operator): Drop sbom-operator

After running it for a while now, it turns to be not too useful for the
SI Infra. The main use-cases for SBOMs at this point are security scans
and license compliance.

None of these are use-cases that I actually used the produced SBOMs for.

One of the main issues for using these SBOMs for security scans was the
glaring false-negatives for actual security issues due to a lack of
detection of certain packages/application within containers.

Instead running renovate and regularly upgrading all parts has proven
way more practical.

License Compliance, while might being a potential concern, is not on the
list of things to worry about right now.

Finally another issue with this particular operator, was it breaking for
various reasons and resulting in dropping out regularly, which made
SBOMs also out of date.
parent b3f07a89
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment