Post #1434878
2023-01-01 21:21 UTC
@Di4na @foosel you can limit reproducibility of builds by keeping well known artifacts that you sign in your own infrastructure. And mandate commit signature to your own code.
Replies (1)
-
@shelldozer@oldbytes.space 2023-01-03 02:40
@juandesant @Di4na @foosel Might be arduous ir tricky for recipients to check, when you are writing portable software eg: automated build with (say) the last 5 versions of 12 compilers across 15 platform types, that may result in several hundred different current 'build results', in terms of sets of executable binary blobs, from a single version of the source.