3 ms·
I think the parent's concern is that there should at least be SOME way to audit everything. That doesn't necessarily mean that everyone ought to be doing it eve
by shawnz 8y ago
I think the parent's concern is that there should at least be SOME way to audit everything. That doesn't necessarily mean that everyone ought to be doing it every time they clone a repo.
- jacquesm 8y agoMost web interfaces to git will allow you to review the repo, if you blindly clone some repo that someone asks you to clone recursively I would see that mostly as a social engineering hack with the technical hook than a purely technical hack. And depending on the sophistication you might want to do that in a chrooted environment or a VM.
- tedunangst 8y agoThere's no way to know if what you see on the web will be what you clone. The inspection must occur locally.