Homebrew is a major attack surface that gets little attention. Topics: formula provenance and tap trust model, verifying third-party taps before adding, what brew audit and brew doctor catch, pinning formula versions, understanding the risk of brew install from unverified taps, and maintaining a clean Brewfile. Relevant to the capture/deploy workflow in pkgs/.
Homebrew is a major attack surface that gets little attention. Topics: formula provenance and tap trust model, verifying third-party taps before adding, what brew audit and brew doctor catch, pinning formula versions, understanding the risk of brew install from unverified taps, and maintaining a clean Brewfile. Relevant to the capture/deploy workflow in pkgs/.