Show HN: Brioche – A new Nix-like package manager

Re:Show HN: Brioche – A new Nix-like package manager by __MatrixMan__ on Monday June 03, 2024 @06:11PM (#40568197)

I'm not so worried about my disciplined coworker who just wants to help. If we were all reviewing his code I'd agree with you.

The people I want to help are those who are unknowingly reviewing malicious commits, and I think that declarative configuration languages have a part to play there.

[ Parent | on HN ]

Re:Show HN: Brioche – A new Nix-like package manager by charlotte-fyi on Monday June 03, 2024 @06:32PM (#40568407)

This is solved in tools like Pulumi by having a declarative and auditable build artifact as an intermediate step that can be diffed. This seems to solve a lot of the security issues (and is generally a good idea anyway).

[ Parent | on HN ]

Re:Show HN: Brioche – A new Nix-like package manager by NegativeLatency on Monday June 03, 2024 @06:43PM (#40568491)

I would still prefer to debug terraform (which is a fair bit more declarative) rather than pulumi

[ Parent | on HN ]