{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreid2mmx5uiifqoa5oz37biady4thp4izy6wipwpxdwnyigdnliobge",
    "uri": "at://did:plc:ivbknywyskln22er3nkssdhl/app.bsky.feed.post/3moe7b42d2e22"
  },
  "path": "/t/separating-fetching-from-building-for-better-security/24390#post_17",
  "publishedAt": "2026-06-15T20:06:42.000Z",
  "site": "https://internals.rust-lang.org",
  "tags": [
    "github.com"
  ],
  "textContent": "If you have a custom registry (and a security minded focus) you can probably manage everything in your custom registry and then block internet access completely. Or you can use a tls terminating sandbox and limit access to specific repositories on e.g. github.com.",
  "title": "Separating fetching from building for better security"
}