Comment by Lvl999Noob
2 months ago
You are building everything in CI from scratch so theoretically, it should be completely possible to not need to scan lockfiles and get all the data from their respective sources (OS, runtime, dynamic libs, static deps, codegen tools, build time deps, etc)
No comments yet
Contribute on Hacker News ↗