3 ms·
Sounds good until you see their cvedetails page
by hsbauauvhabzb 5mo ago
Sounds good until you see their cvedetails page
- sofixa 5mo agoI mean, the GitHub Actions supply chain risks and attacks definitely compensate for any GitLab security vulnerabilities you can think of.
- user43928 5mo ago[dead]
- lazystone 5mo agoHide it behind VPN, so it's not accessible from outside.
- hsbauauvhabzb 5mo agoNow patching becomes a responsibility, unless your organisation is willing to run knowingly vulnerable software.
- PunchyHamster 5mo agoWhen you own it you can just limit it into vpn-ed company users, that significantly cuts down on the area that can be hit