2 ms·
> Off-topic: It's absolutely mad from a security perspective that you can't download flatpaks as a simple bzip file for security analysis. You can download Fla
by red-iron-pine 1y ago
> Off-topic: It's absolutely mad from a security perspective that you can't download flatpaks as a simple bzip file for security analysis.
You can download Flatpak bundles: Flatpak supports exporting apps as .flatpak bundle files, which are single-file archives that can be analyzed offline.
These can be created using flatpak build-bundle or downloaded if the distributor provides them.
If...
- phendrenad2 1y agoFrom a security perspective, I don't trust the binary that downloads and installs a package to just download it. Some package installers, such as Bundler, like to run arbitrary code from the package on install. I don't trust that to not be invoked with a simple download. I'd rather use hardened tools like CURL or a web browser. It's just good security hygiene.