2 ms·
The reproducible build process is also a critical component, not just source code access, because what you download from the marketplace could be different to t
by benoau 2mo ago
The reproducible build process is also a critical component, not just source code access, because what you download from the marketplace could be different to the source. All boils down to trust "but verify", these are the ingredients that let you verify the claims.
- Brandon-Coll 2mo agowell put. I'd add third-party audits to thelist. independent security audits together create a much stronger trust model but regular and different for respective analysis