Re:Polyfill supply chain attack hits 100K+ sites
by gopher_space on Tuesday June 25, 2024 @05:29PM
(#40793858)
> The same concept should be applied to container based build pipelines too. Instead of pulling dependencies from a CDN or a pull through cache, build them into a container and use that until you're ready to upgrade dependencies.
Everything around your container wants to automatically update itself as well, and some of the changelogs are half emoji.
Everything around your container wants to automatically update itself as well, and some of the changelogs are half emoji.