wvengen / proguard-maven-plugin

ProGuard Maven plugin that supports modularised ProGuard packages
http://wvengen.github.io/proguard-maven-plugin/
Apache License 2.0
611 stars 152 forks source link

Reproducible timestamps #279

Open ebourg opened 1 year ago

ebourg commented 1 year ago

The entries in the jar file generated have the date set to the build date. It should be set to the timestamp specified by the project.build.outputTimestamp property in the POM to make the build reproducible.

https://maven.apache.org/guides/mini/guide-reproducible-builds.html

lasselindqvist commented 1 year ago

As long as Proguard itself does not support such an option (https://www.guardsquare.com/manual/configuration/usage), the Maven plugin cannot tell it to use a constant timestamp

Maybe there is another plugin that would "rewrite" the obfuscated jar and produce the result you need.

ebourg commented 1 year ago

Maybe there is another plugin that would "rewrite" the obfuscated jar and produce the result you need.

Indeed, reproducible-build-maven-plugin can do this.