From 025bdee66a53b2b2ca2be7bfcc75e268a24e74af Mon Sep 17 00:00:00 2001 From: Jonathan Leitschuh Date: Thu, 30 Jan 2020 12:37:07 -0500 Subject: [PATCH] Remove comment about problem being unique to open source --- README.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/README.md b/README.md index fab0aa5..9cd7f6e 100644 --- a/README.md +++ b/README.md @@ -24,8 +24,6 @@ Further compounding the issue is that maintainers are most often greeted in thes A fairly simple social engineering supply chain attack against open source would be contribute a helpful “Updated to Gradle xxx” PR that contains malicious code hidden inside this binary JAR. A malicious `gradle-wrapper.jar` could execute, download, or install arbitrary code while otherwise behaving like a completely normal `gradle-wrapper.jar`. -This problem is unique to open source and doesn’t normally impact companies with closed source and pre-vetted employees. - ## Solution We have created a simple GitHub Action that can be applied to any GitHub repository.