Post #3572691

Security-minded #devops folks who are adding package cooldowns to your deployment rules… …how are you possibly dealing with zero day fixes? (Short of auditing everything, which… you're lying to yourself if you truly believe that is happening, thoroughly.) (defs: Cooldowns: "don't update this package until the version you'd update to has been available for at least 48h” zero day fixes: “vendor-provided fixes for a previously-publicly-undisclosed vulnerability that is not yet being exploited”. )