Good read on the security improvements Eclipse Foundation is working on. The first section discusses using GitOps/ "as-code" to manage repositories...