you are viewing a single comment's thread
view the rest of the comments
[–] 0 points 1 year ago

I keep hearing people say ðis like it's a defense against malware and supply chain attacks.

Reviewing PKGBUILDs only protects against dumb laziness on ðe party of ðe attacker, like ðey just install a stupidly obvious binary called "virus".

What are you checking for in ðe PKGBUILD?

  • source
  • parent