From: Konstantin Ryabitsev <konstantin@linuxfoundation.org>
Date: Tue, 14 Apr 2020 20:35:17 GMT
Subject: Re: has anyone bothered to read this "Git is a security risk"?
Message-ID: <20200414203517.qm55zyu34b7nc75h@chatter.i7.local>
In-Reply-To: <alpine.LFD.2.21.2004141612580.6138@localhost.localdomain>

On Tue, Apr 14, 2020 at 04:13:39PM -0400, Robert P. J. Day wrote:
> 
> https://twitter.com/blubracket/status/1250123442600513547

Summary:

  - Accidental data exfiltration is a problem.
  - So are supply chain attacks.
  - Both of the above can happen with git repos.
  - We sell a scanning tool that will help.

-K