Enable daily bounded SBOM catch-up
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 6s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834
This commit is contained in:
tegwick 2026-08-22 20:59:15 +02:00
parent 91ae8dc9a8
commit c2f797f8d5
3 changed files with 79 additions and 7 deletions

View file

@ -1,10 +1,10 @@
---
id: daily-sbom-catchup
name: Daily SBOM Catch-up
enabled: false
enabled: true
owner: custodian-agent
governance: custodian
status: paused
status: active
trigger:
type: cron
cron_expression: "15 9 * * 1-5" # weekdays 09:15, after the daily triage window
@ -25,9 +25,9 @@ context_sources:
# Daily SBOM Catch-up
> **Disabled until production enable evidence is ready.** The `sbom-nexus`
> ranked and terminal ingest/skip APIs are now available. Keep this definition
> off until cluster reachability and a bounded manual fire are proven.
> **Enabled after production proof on 2026-08-22.** Two bounded manual fires
> processed three distinct repositories each, spawned zero tasks, and persisted
> terminal `no-checkout` evidence. The superseded weekly schedule remains off.
Replaces `weekly-sbom-staleness` / `flag-stale-sbom` (ACTIVITY-WP-0030).
The weekly check reported the backlog — 111 / 111 repos stale on 2026-08-18,