January 2026 monthly summary for konflux-ci projects. Focus this month was on security-integrated automation and dependency stability to support SBOM-enabled workflows across catalogs and utilities. Delivered ACS-based authentication for sbomdiff-enabled collectors in konflux-ci/release-service-catalog, plus ROX_ENDPOINT support, and upgraded the Diffused library in konflux-ci/release-service-utils to improve stability and performance.

November 2025: Strengthened security instrumentation in konflux-ci/release-service-utils by initializing SBOM collection tooling and migrating image scanning from Trivy to ACS, enabling SBOM management and broader vulnerability coverage. Two focused commits laid the groundwork and completed the migration: (1) initial SBOM tooling with Trivy and Diffused-lib to support the sbomdiff collector, and (2) a follow-up fix replacing Trivy with the ACS scanner binary to align with an ACS-first scanning strategy. These changes reduced dependency on legacy tooling while boosting security visibility in the release pipeline.