Hi Marco and Mike, We have since long time a requirement that is similar. I have noted it down some time ago: Subscription mechanism for events bosh does have a notion of events, see http://bosh.io/do

+1 !! It would be great if you included a formal way to track which CVE s are covered by a given patch version for each stemcell line so it can easily (automatically) be tracked. Mit freundlichen Grüß