Matt Holt
Matt Holt
I could get behind a JSON config file for these more advanced configs... In fact, the ability to describe a specific Caddy build configuration via JSON seems elegant.
Hmm, I think of knowing the version as a _feature_ actually. It's nice to know once you've downloaded an artifact what version you've got. As for Mac/Darwin, I am always...
I just realized we're in the `xcaddy` repo :man_facepalming: Anyway, I have less strong opinions about how we distribute `xcaddy` -- I can see how more of these downloads might...
> If the scanner says "there's a critical CVE in that code", then it doesn't get deployed -- period. You know, in a sense, the CVE ecosystem is like a...
I'll update the Go version when I'm back at my computer. 👍
Actually, upon investigating, the build server is using 1.23 already. And the build cache was reset, so when I download Caddy from the download page I get a build on...
> Caddy 2 is currently flagged with a number of high and medium CVE's. Where at? --- FWIW, we don't really highly regard the CVE system, which is very broken:...
Thanks @thaoula . I hear you... I'm just saying the tools are broken. > It looks like the issues are all in Go. They're in Go standard library and extended...
Sorry, been quite a bit behind... Yeah, I think that's a good idea. Thanks @firestorm99 for sharing this. I'll try to add this to the readme soon, or someone can...
Will look at this again soon!