`git add --resolved` is a wonderful idea, and definitely something I would start using.
KolmogorovComp•46m ago
Does it mean that when switching trop sha1 to sha256 you need to forcepush and rewrite all history? Wouldn’t that be a massive source of potential vulnerabilities?
nomel•44m ago
I don't know much about this. How does that enable vulnerabilities exactly?
jayd16•40m ago
Trusting a forced push w/o any other verification means nefarious history changes can be slipped in.
WCSTombs•59m ago