- 2025-04-04
  - Dirk K.
    - [ ] DefectDojo - Jira Integration
    - [ ] Monitor SLA expiry on DefectDojo
    - [ ] Workflow for review of assessments in DefectDojo
    - [x] Trivy-Deployment in cluster shall be integrated with DefectDojo
      - [Import Trivy Operator reports into DefectDojo](https://medium.com/@alexander.murylev/implementing-centralized-security-scanning-across-multiple-kubernetes-clusters-with-trivy-and-989f3d5b0f4a)
      - [Trivy Dojo Report Operator by Telekom](https://github.com/telekom-mms/trivy-dojo-report-operator)
  - Thomas O.
    - [ ] DefectDojo and/or DependencyTrack shall notify via mail in case of new vulnerabilities
    - [x] add switch to glue logic to disable integrated SBOM generator and read externally
      generated SBOM from file