skpatch Data Flow

inventory to SBOM to Dependency-Track to alerts/PRs to gate to deploy

skpatch Data Flow inventory to SBOM to Dependency-Track to alerts/PRs to gate to deploy 01 / Inventory 02 / SBOM 03 / Match 04 / Respond 05 / Gate + Deploy Running Services · fleet containers · 01 / Inventory · source Running Services fleet containers source Inventory Job · image, digest, exposure · 02 / SBOM · internal Inventory Job image, digest, exposure internal SBOM Job · Trivy, new digests only · 02 / SBOM · internal SBOM Job Trivy, new digests only internal skbom · Dependency-Track · 03 / Match · SBOM store skbom Dependency-Track SBOM store CVE Feeds · NVD, GHSA, OSV · 03 / Match · public CVE Feeds NVD, GHSA, OSV public Policy Engine · exposure x severity · 04 / Respond · internal Policy Engine exposure x severity internal Alert Fan-out · chat, GTD, ITIL · 04 / Respond · internal Alert Fan-out chat, GTD, ITIL internal Renovate PRs · weekly, grouped · 04 / Respond · internal Renovate PRs weekly, grouped internal Release Gate · build + test harness · 05 / Gate + Deploy · proves fix Release Gate build + test harness proves fix Deploy · pinned update · 05 / Gate + Deploy · same-day / weekly Deploy pinned update same-day / weekly docker inspect internal, read-only image pull internal inventory rows internal CycloneDX SBOM internal vuln data public matched findings internal critical + exposed sensitive: same-day high, fix available internal: weekly same-day PR sensitive: expedited weekly PR internal tagged commit internal Legend primary data policy / PII async batch data store data flow