mirror of
https://github.com/ivabus/pantry
synced 2024-11-30 12:15:06 +03:00
2ff7403742
* Closes #1 * Using bun.sh binaries because we'll probs need to do the same for ziglang because ziglang OOMs during builds in CD * However in general we are happy to use the binaries the project built—they know what they are doing and we should trust them in that. * HOWEVER we should insist that they sign their binaries. Bun do not. * ALSO really we should insist on signed sources, see comments in the YAML for more discussion * Not using profile versions as they are not documented and seemingly less portable (based on reading the installer) |
||
---|---|---|
.. | ||
package.yml |