3 ms·
Maybe some day we'll get serious about reproducible builds, since reproducibility can serve as a layer of defense against such compromises.
by rectang 8y ago
Maybe some day we'll get serious about reproducible builds, since reproducibility can serve as a layer of defense against such compromises.
- ohyeshedid 8y agoMaybe I'm missing something, but reproducible builds wouldn't be that helpful here with write access to the source repo, no? Definitely wouldn't have helped prevent the compromise.
- Svenstaro 8y agoTrue, but they allow you to find out whether any Docker images have actually been compromised.
- debiandev 8y agoDebian is already using reproducible builds.