Comment by supermatt
5 days ago
What is the downside to committing the binary? Immunity to supply chain attacks and a faster build time?
5 days ago
What is the downside to committing the binary? Immunity to supply chain attacks and a faster build time?
The best of both worlds is hosting the binary independently of git in some cloud storage and just have a script that fetches it (and set it in .gitignore). git itself doesn't like binaries very much and it will bloat your git clone speed/size if you update the binary ad it will effectively store all versions.
The specific use case here is someone storing the binary because they're _avoiding_ updates.
Or just use Git LFS.