fonzdm on nostr

Open in Damus

HERMETICVM · 2w

Always thought collecting BOMs for your apps to get alerted whenever a CVE >x dependency got pulled into your infrastructure was enterprise-level security theatre but considering the new reality, it m...

fonzdm @fonzdm 1792700603

and I guess your phone is always ringing

1

HERMETICVM · 2w

It's quite calm. I have a custom quality gate that doesn't let certain stuff into my stack that's famous for having security issues. I generally skip on most javascript and PHP stuff for example.