4 ms·
What's the alternative? I don't know of any reason to think that tarballs or <os> installers are any better. I suppose I could clone the code and look for se
by nineplay 3y ago
What's the alternative? I don't know of any reason to think that tarballs or <os> installers are any better. I suppose I could clone the code and look for security flaws myself but I'm no expert and on something like nginx it's certain to be a waste of my time.
- eatmyshorts 3y agoOCI registries. Harbor + Notary + admission controllers - AKA private image repository with image signing. Sigstore. Another method for signing & verifying artifacts.