Hacker News Reader

Interesting. Do you keep the SBOMs around after the build to track what's running in production?

Currently only an optimised representation in a DB, but I guess they could be re-generated from that.