feat: add support for reproducible builds - Githubissues

aerogear / keycloak-metrics-spi

Adds a Metrics Endpoint to Keycloak

Apache License 2.0

523 stars 151 forks source link

feat: add support for reproducible builds #165

Open inglor opened 1 year ago

inglor commented 1 year ago

Motivation

Add support for reproducible builds

What

Remove the timestamps from manifest
Remove timestamp from and archives
Package in same order on archives

Why

Reproducible builds website explains this well.

How

See What. Inspiration from gradle docs

Verification Steps

Execute gradle jar
Rename jar into something different
Execute gradle jar again
Md5sum the two produced files, it should have the same hash.

Checklist:

[x] Code has been tested locally by PR requester
[ ] Changes have been successfully verified by another team member

Progress

[x] Finished task

Additional Notes