sdk-container-builds icon indicating copy to clipboard operation
sdk-container-builds copied to clipboard

Published 20 hours ago • verified publisher icon dotnet

Reproducible Builds (SOURCE_DATE_EPOCH)

Open cmeyertons opened this issue 6 months ago • 5 comments

Docker BuildKit supports reproducible builds by setting the env var SOURCE_DATE_EPOCH=0

It appears the OCI default labels does not respect this value,

This is a nice tool for teams to leverage in order to perform digest pinning, etc in their deployment pipelines (a new commit doesn't necessitate a re-deployment of infrastructure if the SHA didn't change, etc)

cmeyertons avatar Aug 02 '24 17:08 cmeyertons