4 ms·
Even better, only use company vetted repos, everyone is forbidded to install directly from the Internet repos. This naturally doesn't work outside corporations
by pjmlp 6mo ago
Even better, only use company vetted repos, everyone is forbidded to install directly from the Internet repos.
This naturally doesn't work outside corporations.
- ric2b 6mo agoThat usually ends up as proxies to the upstream repos, because the people managing the company repos don't have time to review every new version of a package. At that point you're just as vulnerable to a supply chain attack.