3 ms·
There's value in enforcing checks on the server side to avoid people accidentally/maliciously merging code that doesn't pass said checks. Checks can be linters,
by Nextgrid 10mo ago
There's value in enforcing checks on the server side to avoid people accidentally/maliciously merging code that doesn't pass said checks. Checks can be linters, security scanners, etc.
- Cyph0n 10mo ago> Checks can be linters, security scanners, etc. The first checks I setup are build and test. The rest is “extra”.
- bdangubic 10mo agowhy on the server?!
- Nextgrid 10mo agoBecause then you protect against a compromised/misbehaving developer workstation. No matter what the individual developer does, the server will prevent a PR being merged if it doesn’t pass the server-enforced checks. Running builds on a designated server would also protect against malware on a developer’s machine silently embedding itself into the resulting artifact and then deployed to production.
- franklyworks 10mo agoThis was probably the question to ask before declaring it all as junk.