Re: Software Bill of Materials (SBOM) anyone?

2024-05-08 Thread carlo von lynX
On Tue, May 07, 2024 at 06:25:45PM +0200, Valentin Gagarin wrote: > curl -L https://nixos.org/nix/install | sh -s -- --daemon Blind execution of something potentially corrupted coming from the Internet, and by use of a pipe you don't even have a way to retroactively find out if your system has

Re: Software Bill of Materials (SBOM) anyone?

2024-05-08 Thread Valentin Gagarin
>>curl -L https://nixos.org/nix/install | sh -s -- --daemon > > Who does stuff like that? This is totally irresponsible. Yes, I know. I’m on the Nix maintainer team dealing with documentation, I’m involved in many things going on in the ecosystem, and we as a community haven‘t managed to