5 ms·
what mitigations do you use to protect systems that automatically updated after every git push?
by PretzelFisch 8y ago
what mitigations do you use to protect systems that automatically updated after every git push?
- yjftsjthsd-h 8y agoWould GPG signatures suffice?
- badrabbit 8y agoDon't auto-update production like that? If a change will affect all users,manually review it and as another commenter said,gpg signatures. Have every prod commiter use mfa too.
- PretzelFisch 8y agoI have seen a lot of people describe their continuous delivery where the code is checked in and moves into production after passing tests. I wasn't sure if they had a way to deal with this type of issue or I am misunderstanding their process somehow. I