Linux

9996 readers

358 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago

MODERATORS

171

submitted 1 week ago* (last edited 1 week ago) by tomenzgg@midwest.social to c/linux@programming.dev

140 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] rumba@lemmy.zip 2 points 1 week ago (1 children)

It's all fun and games until some asshole slips something into your trusted package manager.

Exploits are the deal pain

[–] fruitycoder@sh.itjust.works 1 points 6 days ago

Yep SLSA is more than just a trusted end point. Package signatures, reproducible builds, SBOMs, signed commits and more!