> Said process could silently insert code into repos, corrupt the build environment, replace packages in production, or whatever Haha I hope this to be true :s

> Said process could silently insert code into repos, corrupt the build environment, replace packages in production, or whatever Haha I hope this to be true :sigh: The reality is that all those security hardening measures already surpass the level where it significantly undermines the overall productivity... Engineers cannot even have a test run on production data without an explicit review from colleagues.