jvm-repo-rebuild / reproducible-central

Reproducible Central: rebuild instructions for artifacts published to (Maven) Central Repository
105 stars 45 forks source link

automate check for unreleased code #2

Open hboutemy opened 4 years ago

hboutemy commented 4 years ago

current rebuild.sh is perfect to easily check officially released artifacts, against content available in Central repository when the result is "it works, yay!", that's perfect, but when the result is "nice try, but you can do better", it's too late: the release is there there is a recipe to build locally twice and check against each other: https://maven.apache.org/guides/mini/guide-reproducible-builds.html automating this recipe would permit to test master HEAD of projects before doing a release

hboutemy commented 4 years ago

job done for Maven master HEAD SNAPSHOTs: https://github.com/jvm-repo-rebuild/reproducible-maven-HEAD also done for Plexus: https://github.com/jvm-repo-rebuild/reproducible-plexus-HEAD and MojoHaus: https://github.com/mojohaus/reproducible-mojohaus

I don't know how to make this more generic, ideas welcome