john-packages icon indicating copy to clipboard operation
john-packages copied to clipboard
verified publisher icon openwall

Tweaks

Open claudioandre-br opened this issue 1 year ago • 1 comments

Describe your changes

  • pin another bash script;
  • add sonar to the IDE Docker image.

Issue ticket number and link

#322

claudioandre-br avatar Apr 27 '24 13:04 claudioandre-br

This strategy is safe without the risk of possible compromised (node) dependencies.

What is "guaranteed" here is that we will use the "Node.js DEB repository". However, if the Node.js DEB repository is compromised, we will use the official compromised packages.

claudioandre-br avatar Apr 27 '24 13:04 claudioandre-br