Linux

9942 readers

2055 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago

MODERATORS

170

submitted 3 days ago* (last edited 3 days ago) by tomenzgg@midwest.social to c/linux@programming.dev

131 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] rumba@lemmy.zip 2 points 2 days ago (1 children)

It's all fun and games until some asshole slips something into your trusted package manager.

Exploits are the deal pain

[–] fruitycoder@sh.itjust.works 1 points 2 days ago

Yep SLSA is more than just a trusted end point. Package signatures, reproducible builds, SBOMs, signed commits and more!