3 ms·
Having a reproducible build does not prove that the tarball contains the same source as git.
by blueflow 2y ago
Having a reproducible build does not prove that the tarball contains the same source as git.
- pkaeding 2y agoSLSA aims to achieve this, though, right? Specifically going from level 2 to level 3.
- deleted 2y ago[deleted]