3 ms·
That's not totally without cost though, as it can break workflows that cherry pick commits between branches. eg main/master branch vs stable release branches
by justinclift 3y ago
That's not totally without cost though, as it can break workflows that cherry pick commits between branches. eg main/master branch vs stable release branches
- ownagefool 3y agoI don't think anyone is saying it's without cost, just that there are certain circumstances where you might want to bare the cost. There's a generic question of how you build confidence in your dependcies not being compromised, and there's steps you can take to mitigate that without reading code, but if everyone was adopting that stance then we'd likely have no mitigations