Post #1434876
2023-01-01 20:02 UTC
@Di4na @foosel oh, I had not understood that, I was thinking of more general principles… and it never occurred to me that someone else could think otherwise.
At #SKAO we were creating our own images and repositories for dependencies, with their own security setups, because we understood we could not force that upstream.
Replies (1)
-
@Di4na@hachyderm.io 2023-01-01 20:52
@juandesant @foosel Note that it would not solve making the build reproducible (which usually needs a deep change in the code) or signing the commits.