Conversation
Jarkko Sakkinen
jarkko
There has been enough supply chain attacks for modern system languages that I consider them a real security issue in the current Landstrip implementation.
To address these issues in long-term I'll migrate in the runtime over time to C++20, follow Google's C++ style guide for syntax and conventions, and compile release binaries with zig cc (to enable local publishing).
To address these issues in long-term I'll migrate in the runtime over time to C++20, follow Google's C++ style guide for syntax and conventions, and compile release binaries with zig cc (to enable local publishing).
2
1
1
Stefan Fuertinger
sfuertinger@mast.hpc.social@jarkko We’ve migrated our OpenCode users from a custom-made bubblewrap sandbox to landstrip and it has been working amazingly well. Thanks for this fantastic tool!
1
0
0
@sfuertinger Thanks, I'm glad to hear :-) It's still evolving as sandboxes tend to take time find their form. C++ (following Google's conventions) conversion is the future direction as it stabilizes implementation language i.e. it is step towards that direction (and objectively zeros out a full attack vector). Only alternative would be actually Ada but I don't have time to learn it ;-)
1
0
0