GitHub & Supply Chain Risks

Contributing members of the open source project git deployed a code change in June 2022 that switched the default file compression method from the gzip program to an internal gzip-compatible implementation. The change was made for performance reasons and to reduce the dependency on the aging gzip project. Unfortunately, it also impacted SaaS offerings like GitHub that use git under the hood. GitHub deployed the change and was also forced to quickly roll it back in January 2023. The scenario …

aging back change code compression default dependency file git github internal june open source performance program project risks saas supply supply chain supply chain risks under