Who is this project for? The personas.

This page lists the people who use Kubewarden SBOM Scanner, and what each of them does with it. The use cases refer to these personas.

Kubewarden SBOM Scanner personas

Persona Description

Persona	Description
Operator	Installs SBOM Scanner in a cluster and keeps it running. Sizes the workers, configures the database and the telemetry collector. In an air-gapped cluster, mirrors the vulnerability databases.
Platform engineer	Decides what the scanner looks at. Creates the `Registry` resources, sets the scan schedule and the filters. Enables workload scanning and node scanning for selected namespaces and nodes.
Application team	Owns one or more workloads. Reads the workload scan reports for its namespaces. Updates the images that have known vulnerabilities.
Security engineer	Owns the risk decisions. Reads the vulnerability reports and selects the VEX repositories that the scanner trusts. Sets the priority for remediation.
Integrator	Builds tools on top of SBOM Scanner. Reads the SBOMs and the reports with `kubectl`, the MCP server, or the OpenTelemetry events. Examples are a dashboard, a CI pipeline, or an admission policy.
Developer	Works on SBOM Scanner itself.

Operator

Installs SBOM Scanner in a cluster and keeps it running. Sizes the workers, configures the database and the telemetry collector. In an air-gapped cluster, mirrors the vulnerability databases.

Platform engineer

Decides what the scanner looks at. Creates the Registry resources, sets the scan schedule and the filters. Enables workload scanning and node scanning for selected namespaces and nodes.

Application team

Owns one or more workloads. Reads the workload scan reports for its namespaces. Updates the images that have known vulnerabilities.

Security engineer

Owns the risk decisions. Reads the vulnerability reports and selects the VEX repositories that the scanner trusts. Sets the priority for remediation.

Integrator

Builds tools on top of SBOM Scanner. Reads the SBOMs and the reports with kubectl, the MCP server, or the OpenTelemetry events. Examples are a dashboard, a CI pipeline, or an admission policy.

Developer

Works on SBOM Scanner itself.