points by hirako2000 3 days ago | 0 comments
I also did that, for a team deploying smart contract on chain from local.
It took a couple months to get the pipeline out of their laptop.
Worth it, yes, as we found interesting things in there which explained why they were so reluctant to deploy upgrades.
[–] pjc50 3 days ago
[–] hirako2000 3 days ago
No, rather a particular environment with monkey patched libraries, alias for various versions of compliers, and dozens of env variables that happen to work or not work well with the desired config.
.. backdoors which enabled the dev to deploy exploits of their own which wouldn't be visible through CI?