3 ms·
We use an artifact server and our build servers are completely airgapped. We know exactly what dependencies are used across the organisation. We can take centra
by tikkabhuna 5y ago
We use an artifact server and our build servers are completely airgapped. We know exactly what dependencies are used across the organisation. We can take centralised action against malicious dependencies.
I wouldn't bother having one if you're small (<25) people. If you start having a centralised Infosec group, then it starts to become necessary.
- njharman 5y agoAirgaped? Really? Everytime a build happens someone physically moves a Thu drive or some other media too from the build server? Airgap means not networked, even internally. Not just "blocked" from internet.
- tikkabhuna 5y agoWikipedia[1] offers a slightly relaxed definition, although I agree, I (and my colleagues) abuse the term. The artifact repository server connects to the internet via a proxy. Build servers have no access to the internet. [1] https://en.wikipedia.org/wiki/Air_gap_(networking) https://en.wikipedia.org/wiki/Air_gap_(networking)