Post #1434877
2023-01-01 20:52 UTC
@juandesant @foosel Note that it would not solve making the build reproducible (which usually needs a deep change in the code) or signing the commits.
Replies (1)
-
@juandesant@astrodon.social 2023-01-01 21:21
@Di4na @foosel you can limit reproducibility of builds by keeping well known artifacts that you sign in your own infrastructure. And mandate commit signature to your own code.