Hank Donnay

I see the `SHA256SUMs` file (NB not `SHA256SUMS`) has a list, but there's no way to tell what's not being updated any more.

I suppose we could also ask the suse security team if we can consider the index page API, but I'd consider that a method of last resort because parsing a...

Yeah, this is a mess.

Note for future us: there's talk in the distribution spec about handling uncompressed layers -- this would be very helpful for calculating what we need.

This seems wrong, as it would change the defaults if the `Airgap` option is set.

Yes, something like an SBOM would be the thing to use, although claircore doesn't have any indexers for those at the moment. The bigger problem to solve would be where...

Why is the max and average duration so much worse? I don't understand why the graphs don't seem to correlate at all to the numbers in the table. It looks...

~~Needs CI updates; working on those.~~ Done

Not sure if there's a good way to cook up a test for this?

ping @crozzy