u/-Devlin-

The amount of non sensical noise from scanners , unused artifacts, 3p dependencies and the general lack build time hygiene makes our CI CD painfully slow. There is a lot to triage at the end of each build (referring specifically to images we ship). What do people use for gating releases and what does your triage/remediation process for unfixable CVEs look like?

Please don’t suggest vendor tools or catalogs. We have 0 budget to buy anything.