← Back to context

Comment by geye1234

9 hours ago

I use Pi, but I think its updates and its extensions' updates are the biggest security gap I have right now. I'm not even sure what they keep updating TBH.

Any recommendations?

Put it in a container with a build step and lock down versions. That's what I did. Then you can choose what to update, audit code, etc.

Whatever agent will be more than capable of wiring that up.