27 ms·
Are there best-practices public platforms for generating and/or verifying reproducible builds? I'm not aware of this as a feature with GitHub or similar.
by dweekly 8y ago
Are there best-practices public platforms for generating and/or verifying reproducible builds? I'm not aware of this as a feature with GitHub or similar.
- dane-pgp 8y agoThere is some documentation about the cross-distro effort to produce reproducible package builds here: https://reproducible-builds.org/docs/sharing-certifications/ https://reproducible-builds.org/docs/sharing-certifications/ and this is a good explanation about Mozilla's plan for logging Binary Transparency results: https://wiki.mozilla.org/Security/Binary_Transparency https://wiki.mozilla.org/Security/Binary_Transparency