3 ms·
> instead of updating to the absolute latest version available of everything, it updates to versions that were released no more than some configurable amount of
by cmckn 1y ago
> instead of updating to the absolute latest version available of everything, it updates to versions that were released no more than some configurable amount of time ago
The problem with this approach is you need a certain number of guinea pigs on the bleeding edge or the outcome is the same (just delayed). There is no way for anyone involved to ensure that balance is maintained. Reducing your surface area is a much more effective strategy.
- biggusdickus69 1y agoNot necessarily, some supply chain compromises are detected within a day by the maintainers themselves, for example by their account being taken over. It would be good to mitigate those at least.
- cmckn 1y agoIn that specific scenario, sure; but I don't think that's a meaningful guardrail for a business.