skpatch Component Map

Patch at AI speed: pinned images, continuous scanning, gated release

skpatch Component Map Patch at AI speed: pinned images, continuous scanning, gated release Upstream Registries · image sources · Architecture component Upstream Registries image sources Release Gate · build + test harness · Build worker, outbound HTTPS only Release Gate build + test harness Build Host · + failover · Build worker, outbound HTTPS only Build Host + failover skgit · repo of record · Fleet cluster (always-on) skgit repo of record Renovate · pin-bump PRs · Fleet cluster (always-on) · weekly Renovate pin-bump PRs weekly skflow · workflow engine · Fleet cluster (always-on) skflow workflow engine Inventory Job · daily, read-only · Fleet cluster (always-on) Inventory Job daily, read-only skbom · Dependency-Track + SBOM store · Fleet cluster (always-on) · CVE matching skbom Dependency-Track + SBOM store CVE matching Alert Fan-out · chat + GTD + ITIL · Fleet cluster (always-on) Alert Fan-out chat + GTD + ITIL Update Dashboard · host patching · Fleet cluster (always-on) › SSO-gated Update Dashboard host patching sksso · identity provider · SSO-gated sksso identity provider Deploy Targets · fleet nodes, pinned · Fleet cluster (always-on) Deploy Targets fleet nodes, pinned image pulls detects pins opens PRs schedules digests + SBOMs policy match PR dispatch runs on tagged + gated host updates auth surfaces findings Fleet cluster (always-on) SSO-gated Build worker, outbound HTTPS only Legend Frontend Backend Database Cloud Security Message bus External