Either way, the package can do whatever it wants as root when it's installed. Building in a container is to provide protection from stupid mistakes, not an attacker.
signature.asc
Description: OpenPGP digital signature
Either way, the package can do whatever it wants as root when it's installed. Building in a container is to provide protection from stupid mistakes, not an attacker.
signature.asc
Description: OpenPGP digital signature