Neal Gompa (ニール・ゴンパ) :fedora:@doctormo @andy @Di4na @pnathan The correct answer is that as soon as you know you have *one* system that it matters on, you should be funding it. For each extra system, you can incrementally add to it. The problem with all the existing solutions is that they are all designed to figure out how much you can ignore, not how much you should support. The attitude is just wrong for SLSA, SBOM, etc. Everyone just does risk assessments because nobody wants to actually fix the problem.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.