3 ms·
If Jia Tan's PR was approved, malicious artifacts could go to github releases just as easily as in a tarball. Struggling to understand the point made about gith
by thdhhghgbhy 2y ago
If Jia Tan's PR was approved, malicious artifacts could go to github releases just as easily as in a tarball. Struggling to understand the point made about github releases being a security mitigation.
- dsp_person 2y agoWhen I did my first github "release" I was shocked that it involved picking files to upload...
- mikrotikker 2y agoAnd how many of these files have I downloaded over the years? :sob:
- lima 2y agoThe real answer here is downloading a tarball generated from a tag - those are generated by the GitHub backend.