3 ms·
How much of this functionality only works when both the dependency and the code that depends on it are both hosted on GitHub? I'm not looking forward to a "Cod
by zdw 4y ago
How much of this functionality only works when both the dependency and the code that depends on it are both hosted on GitHub?
I'm not looking forward to a "Code must be hosted (or at least mirrored) on Github" future.
- nerdponx 4y agoYou know that Microsoft would love this outcome and will gladly use the need for regulatory compliance as a mechanism to push for it.
- lucideer 4y agoAs much as that's always a possibility, there's so much competition in this space that Github is just entering into that I don't see it happening anytime soon. The angle for Microsoft here is they're probably going to charge enterprise GH customers a severe premium to avail of this - it will only be freely available to users who aren't the primary target audience.
- acdha 4y agoThey note that you can upload SBOMs to GitHub, which makes sense given how many places have their own build infrastructure and may not be able or comfortable posting all of their dependencies.