Discover and read the best of Twitter Threads about #reproduciblebuilds
Most recents (1)
Whoa, what happened here?! How did @caddyserver release assets count go from 28 to 134?
Well, @projectsigstore happened! Buckle up 🏎️
Well, @projectsigstore happened! Buckle up 🏎️
Since the initial days of v2 and before v2 being GA, we worked on having #ReproducibleBuilds. Much of this was easy thanks to @GoReleaser (go sponsor @caarlos0!) and @golang tooling!
blog.goreleaser.com/reproducible-b…
blog.goreleaser.com/reproducible-b…
The tooling allows having byte-for-byte match between two binaries if build your own from scratch using tools. In other words, cloning the repo and building v2.x.x using @GoReleaser on your own machines should give you 0-diff binary compared to the ones produced by our CI/CD.
