4 ms·
Maybe I'm missing something, but reproducible builds wouldn't be that helpful here with write access to the source repo, no? Definitely wouldn't have helped pr
by ohyeshedid 7y ago
Maybe I'm missing something, but reproducible builds wouldn't be that helpful here with write access to the source repo, no?
Definitely wouldn't have helped prevent the compromise.
- Svenstaro 7y agoTrue, but they allow you to find out whether any Docker images have actually been compromised.