Are people here automating #mysql queries done by Developers in some kind of #gitops style?

If yes I would like to hear from you how it is done or which tools to look at. At my place Developers have restricted access to prod MySQL and for now always request or run queries manually. Migrations are a no go (don't know why).

I am currently sitting in front of a little project which includes scanning a data source for secrets, passwords and so on.

Problem is, there is no library which I could include into my #golang application.
Here something fitting would be that it just switches a Bool variable.

Other projects have done it the hard way and just hard coded the whole #regex into their application.

Also it seems I am not able to find any external collection of regex lists which I could just download or set aside my application to read in.

I saw now several talks about companies using #kyverno to restrict deployments made to production.
They only allow deployments where #trivy or other scanners report a certain low amount of vulnerabilities. Also #sboms are checked for existence. Sometimes even more restrictions apply.

How do these companies handle then third party #docker images needed ? For example some official Python images?
Having some kind of automatic mirror of requested applications to fetch them and build the needed things on their own systems ?
Just blocking and tell them “yeah please wait few days until we work on that ticket”

It seems I am confusing or missing something…