Post #625212

So I heard you like #SBOM, so I put SBOM into the #Python wheels in #Fedora RPMs, so when you unwheel the wheels, you get the SBOM. If your Python virtual environment was created on Fedora, your #security scanner can recognize #CVE fixes in patched pip (or setuptolos) within. The question, however, is: What to do with this now :D https://developers.redhat.com/articles/2025/12/15/how-reduce-false-positives-security-scans Anyway, security scanner people, please reach out.