Hi, as far as i know, setting <Deterministic>true</Deterministic> in csproj should be enough for this. See line 73 in https://github.com/apache/logging-log4net/pull/115/files#diff-0f81264aa7e82fb31702de904a86565584da1349835af0d3b08b69d09502a384
Regards. Jan Thursday, February 29, 2024, 1:12:24 PM, you wrote: > Hi Piotr > I actually don't know with 100% accuracy, but I did find this: > https://www.mitchelsellers.com/blog/article/net-5-deterministic-builds-source-linking > which is a little old but might be worthwhile investigating. > -d > On 29 February 2024 13:54:47 "Piotr P. Karwasz" <piotr.karw...@gmail.com> > wrote: >> Hi Davyd, >> >> On Thu, 29 Feb 2024 at 12:29, Davyd McColl <dav...@gmail.com> wrote: >>> Jan, Volkan brings up one of the sticky points - signing the release - >>> which I can do from my personal >>> >>> machine, with the binary artifacts in place - so I could do steps 3 and >>> 4 (build and sign) - but I'll only >> >> This is just a curiosity (don't feel pressured to answer). Are .NET >> artifacts reproducible? If it is so, could we build it and sign it in >> Github actions and you could just verify that the SHAs are identical >> to those locally built? >> >> Piotr
