Comment by geye1234

9 hours ago

I use Pi, but I think its updates and its extensions' updates are the biggest security gap I have right now. I'm not even sure what they keep updating TBH.

Any recommendations?

1 comment

geye1234

Reply
kadoban  8 hours ago

Put it in a container with a build step and lock down versions. That's what I did. Then you can choose what to update, audit code, etc.

Whatever agent will be more than capable of wiring that up.