search

dotnet / reproducible-builds

Contains the DotNet.ReproducibleBuilds package
MIT License
168 stars 18 forks source link

Set RestorePackagesWithLockFile to true #25

Open cmeeren opened 1 year ago

cmeeren commented 1 year ago

For reproducible builds, isn't it necessary to set <RestorePackagesWithLockFile>true</RestorePackagesWithLockFile>?

AFAIK, this ensures you get the exact package versions that you want.

It also stops situations where e.g. CI restores a different package (same ID and version, but different content/cash). I have experienced this.