Re: [I] Reduce Size of Pinot Release Binary [pinot]

["hpvd (via GitHub)" <gi...@apache.org>]

hpvd commented on issue #13726:
URL: https://github.com/apache/pinot/issues/13726#issuecomment-2262362318

   double +1
   just to some general thoughts on security:
   1. the bigger a package the higher the chance for security issues insights -now or some weeks after release.
   so
   - smaller package is always better
   - there may be more motivation to fix CVE, when their is a chance to cut the number e.g. by half with fixing only 2 of them
   - we may think in future of decoupling release processes of plugins/artifacts to easily have a new release which fixes some things instead of having to wait for a large one
   2. we should think of security when providing the possibility/scripts for downloading plugins before or especially at runtime
   - look at / use already available tools/processes for this
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org