Mirrored dependencies to increase reproducibility, security, and speed
After we support artifacts we can look into mirroring dependencies automatically.
As a user when I use GitLab CI all dependencies should be mirrored in GitLab automatically.
See https://www.jfrog.com/blog/fully-reproducible-builds-with-circleci-and-artifactory/ for an example.
Mirroring will increase reproducibility, security, and speed.
- Reproducibility: if someone yanks a package or if the central repository (rubygems.org) is down the build still works.
- Security: we can detect changes to a package.
- Speed: getting the dependency from GitLab when it is needed again will be faster than getting it from a central place.
Edited by Mark Pundsack