gradlex-org / reproducible-builds

Reproducibility settings applied to some of Gradle's built-in task, that should really be the default.
Apache License 2.0
15 stars 0 forks source link

Ensure reproducible artifact resolution by setting ResolutionStrategy.failOnNonReproducibleResolution() #9

Open steffenyount opened 2 weeks ago

steffenyount commented 2 weeks ago

See the following dsl docs for details:

https://docs.gradle.org/current/dsl/org.gradle.api.artifacts.ResolutionStrategy.html#org.gradle.api.artifacts.ResolutionStrategy:failOnNonReproducibleResolution()

Without this setting artifact resolution may change depending on when the build is executed, and what artifacts are available in the artifact repository at that time.

This setting helps ensure that subsequent builds for the same Git commit will resolve to the same artifact dependency graph.

jjohannes commented 2 weeks ago

I like this proposal. Thanks.