3 ms·

I don't think bundling in components inherently changes the reproducible builds equation. In fact I think that bundling in a JVM that they know works in a part

I don't think bundling in components inherently changes the reproducible builds equation. In fact I think that bundling in a JVM that they know works in a particular way will likely improve the reproducibility of Bazel _setups_ and therefore builds that come out of Bazel, which is their aim.

DuskStar 7y ago
"every time the NSA's compiler binary builds my code I get the same output" isn't really all that comforting. If you can't build the compiler (and/or build tool) how can you be sure that there isn't anything malicious in it? Trusting trust all over again