mastodon 4.7.3Free software 👨💻 engineer at 
Red Hat. ❤️ #Fedora #Python maintainer, Fedora Council member, 📦 Packaging Committee, Fedora Ambassador, former Fedora 🧑⚖️ Engineering Steering Committee member, and contributing Python Software Foundation member.
🦁 Czech Technical University and 🩷 Czech PyLadies beginners courses teacher 🧑🏫.
🇨🇿 Czech 👨🌾 villager.
Living with 2 🐺 Irish Wolfhounds and 3 🐈 ginger cats.
After years in open source development, I've learned that sometimes I need to enable others to do things I would normally do trivially, even though they may take longer and won't be perfect (read: not the same as I would have done it :D). It allows others to grow, and I gladly accept that tradeoff. It pays off.
But no. I refuse to spend my energy on providing feedback to somebody else's LLM chat. Sorry, not sorry.
So I heard you like #SBOM, so I put SBOM into the #Python wheels in #Fedora RPMs, so when you unwheel the wheels, you get the SBOM.
If your Python virtual environment was created on Fedora, your #security scanner can recognize #CVE fixes in patched pip (or setuptolos) within.
The question, however, is: What to do with this now :D
https://developers.redhat.com/articles/2025/12/15/how-reduce-false-positives-security-scans
Anyway, security scanner people, please reach out.