4 ms·

I wonder how they deal with the possibility that a github xcode project build file can run arbitrary code... What if someone submits a project to build that spa

by 0x0 13y ago

I wonder how they deal with the possibility that a github xcode project build file can run arbitrary code... What if someone submits a project to build that spawns a reverse shell and then trojanizes the build server for later builds? I wouldn't trust any ipa coming out of that machine.

TheMakeA 13y ago
There are a number of options. For instance, each build could run on a freshly provisioned virtual machine (like Travis CI), or using a carefully crafted sandbox-exec setup.
- deleted 13y ago
  [deleted]