3 ms·
It's not really true to say that the commit history of a project is an important aspect in regards to security. Whether it's security-sensitive or not, a projec
by sillysaurus3 9y ago
It's not really true to say that the commit history of a project is an important aspect in regards to security. Whether it's security-sensitive or not, a project has either been audited or it hasn't. And an audit doesn't rely on commit messages.
- cyphar 9y agoYes, but usually audits are of a single snapshot in the repo's history. Understanding why a change was made is quite important, especially if someone touched security-sensitive code.
- deleted 9y ago[deleted]