freedomofpress / securedrop-builder

Packaging logic for building SecureDrop-related Debian packages
GNU General Public License v3.0
7 stars 11 forks source link

Check that bootstrap itself is reproducible #477

Closed eloquence closed 8 months ago

eloquence commented 11 months ago

Our reproducible wheel tests currently cover our project components but not the bootstrap wheels themselves:

https://github.com/freedomofpress/securedrop-builder/blob/main/tests/test_reproducible_wheels.py#L7-L10

To ensure the bootstrap wheels themselves continue to be reproducible (same bootstrap -> same output wheels), we should perhaps consider including them in this test.