Chip Zoller
Chip Zoller
Sign off is not complete.
Converting to draft until all basic requirements are met.
Please sign off on your PR.
Sign off is not complete.
Converting to draft until all basic requirements are met.
@nsagark, do you intend to complete this PR or shall we close it?
@nsagark, do you intend to complete this PR or shall we close it?
We wouldn't be "pointing people" to it; it would only be used for test purposes, inside an isolated CI/CD environment, not as part of the policy definition itself.
Yes. We have a number of images we use which fall into the same category. Their presence doesn't serve as an endorsement for others, only inputs for policy validation.
I get your intentions but I generally disagree. Regardless, how do we verify your policy works as intended? We obviously need an image with an SBOM with the affected packages...