5 ms·
How this pattern/toolset protect against supply chain compromises of the dependencies used to build the "Datadog Agent" itself?
by p932 6y ago
How this pattern/toolset protect against supply chain compromises of the dependencies used to build the "Datadog Agent" itself?
- trishankdatadog 6y agoApply pattern/toolset recursively. Software supply chain problems largely eventually solved this way.
- p932 6y agoIs there any initiative in this direction towards applying this pattern on big dependency management tools (e.g maven, pip, npm)?
- trishankdatadog 6y agoYes, please see PEP 458: https://www.python.org/dev/peps/pep-0458/ https://www.python.org/dev/peps/pep-0458/