|
|
|
|
|
by pjmlp
1093 days ago
|
|
True, as long static analysers aren't part of the build, at which time specific constructs can be made to break the CI/CD build, forcing everyone to play by the rules if they want the PR to go through. It isn't perfect, but does improve a lot the security baseline. |
|