Jeremy Schneider: Agents Gone Awry on Postgres SBOMs: Start Over

If you were wondering, it’s the SBOM thing that I mentioned the other day. Postgres Extensions in containers with full inventory, provenance and attestation. I’ve been using plenty of AI Agents to put this together. This blog is a little scattered (apologies) but as they say, I didn’t have time to write a short letter. Here’s what I believe to be the exact structure of current CloudNativePG images: I have a bunch of irons in the fire related to this project: A downstream fork of CloudNativePG/postgres-extensions-containers which can host a bunch of Open Source code which isn’t allowed by CNCF.