Protection against malware shall be implemented and supported by appropriate user awareness.
We prioritize security at the deployment level than the traditional anti-malware or antivirus solutions on local systems. Our self-hosted registry utilizes Harbor with Trivy for scanning container images, ensuring that only clean, verified images are used in our environments.
When configuring services from external sources via Linuxaid, such as RustDesk from GitHub, we implement rigorous checksum verification. This practice adds an essential layer of security by confirming that the packages have not been tampered with before integration into our systems.
To mitigate supply-chain issues, we host packages in our own repository. This ensures that if external services, such as GitHub, are unavailable, we can still access the necessary packages and maintain continuity in our operations, further strengthening our defense against potential malware threats.