Erwan-loot commented on PR #2846: URL: https://github.com/apache/tika/pull/2846#issuecomment-4934928874
Done — pushed a commit that pins `org.opencontainers.image.created` to the commit date (`git show -s --format=%cI HEAD`) instead of the build time, in both `docker-release.yml` and `docker-snapshot.yml`. `created` and `revision` now both describe the source commit, so identical sources yield identical labels (SOURCE_DATE_EPOCH convention). Note this only makes the OCI **labels** deterministic; full bit-for-bit image reproducibility is broader (base-image pinning, file mtimes, etc.) and out of scope here, but this is a prerequisite for it. @nddipiazza shout if you'd rather keep literal build time. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
