13 ms·
How does a pull-through cache prevent this issue? Wouldn’t it also just pull the infected version from the upstream registry?
by tom1337 1y ago
How does a pull-through cache prevent this issue? Wouldn’t it also just pull the infected version from the upstream registry?
- pragma_x 1y agoI think it's implied that packages can be blocked and/or evicted from said cache administratively. This deliberately breaks builds, and forces engineers to upgrade/downgrade away from bad packages as needed.