I'd bet GitHub's hardware, if they use any at all for their servers, has ipmitool installed. When you're in GitHub's position, how does your SBOM vulnerability

I'd bet GitHub's hardware, if they use any at all for their servers, has ipmitool installed. When you're in GitHub's position, how does your SBOM vulnerability management program handle it when you imperil your own infrastructure?