Hi Piotr
I actually don't know with 100% accuracy, but I did find this:
https://www.mitchelsellers.com/blog/article/net-5-deterministic-builds-source-linking
which is a little old but might be worthwhile investigating.
-d
On 29 February 2024 13:54:47 "Piotr P. Karwasz" <piotr.karw...@gmail.com>
wrote:
Hi Davyd,
On Thu, 29 Feb 2024 at 12:29, Davyd McColl <dav...@gmail.com> wrote:
Jan, Volkan brings up one of the sticky points - signing the release -
which I can do from my personal
machine, with the binary artifacts in place - so I could do steps 3 and
4 (build and sign) - but I'll only
This is just a curiosity (don't feel pressured to answer). Are .NET
artifacts reproducible? If it is so, could we build it and sign it in
Github actions and you could just verify that the SHAs are identical
to those locally built?
Piotr
