Hacker Newsnew | past | comments | ask | show | jobs | submit | hesyiah's commentslogin

Instead of committing the binary, I highly recommend using a .tool-versions file (if you use asdf or mise) or a Dockerfile with a pinned version.


What is the downside to committing the binary? Immunity to supply chain attacks and a faster build time?


The best of both worlds is hosting the binary independently of git in some cloud storage and just have a script that fetches it (and set it in .gitignore). git itself doesn't like binaries very much and it will bloat your git clone speed/size if you update the binary ad it will effectively store all versions.


The specific use case here is someone storing the binary because they're _avoiding_ updates.


Or just use Git LFS.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: