News for hackers. Stuff that matters.

A comment on Polyfill supply chain attack hits 100K+ sites. Parent comment

Re:Polyfill supply chain attack hits 100K+ sites by alephnerd on Tuesday June 25, 2024 @04:21PM (#40793146)
I just gave Artifactory as an example. What about GHE, self-hosted GitLab, or your own in-house Git?

Edit: was thinking - would be a pain in the butt to manage. That tracks, but every org ik has some corporate versioning system that also has an upsell for source scanning.

(Not being facetious btw - genuinely curious)

[ Parent | on HN ]
Re:Polyfill supply chain attack hits 100K+ sites by baq on Tuesday June 25, 2024 @05:15PM (#40793700)
I've been a part of a team which had to manage a set of geodistributed Artifactory clusters and it was a pain in the butt to manage, too - but these were self-hosted. At a certain scale you have to pick the least worst solution though, Artifactory seems to be that.
[ Parent | on HN ]