3 ms·
> delays updates from packages that are recently updated under suspicious circumstances This is an example of the security curation you note earlier. People
by smcnally 7y ago
> delays updates from packages that are recently updated under suspicious circumstances
This is an example of the security curation you note earlier.
People reviewing flags alongside the code, remediation during the delay, highlighting package authors you like are some of why “Being the canonical registry … tends to be a huge expense.” How many people build and run GitLab Package Registry?
- sytse 7y agoWe don’t know exactly how many people use it since it is open source but I think between 100,000 and 1 million people. The docker container registry is the most popular. The security curation examples I mentioned are intended to use automated signals so there wouldn’t be an expense for labor. In fact we intend to run them separately on every self managed GitLab installation.