|
|
|
|
|
|
by Terretta
2051 days ago
|
|
|
> Unless this a compromise of the build machine ... Assume compromise of the build machine. Start with, who builds the build machine, and how do they maintain it? Can humans get into it at all, such as in a break glass scenario? Also, GitHub, GitLab, and the like, may not actually guarantee what you are relying on to enforce “the only way”. |
|
|