[
https://issues.apache.org/jira/browse/TIKA-4592?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Tim Allison resolved TIKA-4592.
-------------------------------
Fix Version/s: 4.0.0
Resolution: Fixed
> Implement Reproducible Builds for tika-grpc
> -------------------------------------------
>
> Key: TIKA-4592
> URL: https://issues.apache.org/jira/browse/TIKA-4592
> Project: Tika
> Issue Type: Sub-task
> Reporter: Nicholas DiPiazza
> Priority: Major
> Labels: build, reproducible-builds, security, tika-grpc
> Fix For: 4.0.0
>
>
> h2. Objective
> Implement reproducible builds for the tika-grpc module to ensure bit-for-bit
> identical outputs across different build environments.
> h2. Tasks
> * Configure Maven properties for reproducible builds in tika-grpc/pom.xml
> * Set project.build.outputTimestamp property
> * Configure maven-jar-plugin for reproducible archive creation
> * Configure maven-source-plugin for reproducible source archives
> * Handle gRPC-generated code reproducibility
> * Configure protobuf plugin for deterministic code generation
> h2. Verification
> * Build tika-grpc multiple times and verify checksums match
> * Build on different machines/environments and verify reproducibility
> * Verify gRPC generated code is deterministic
> * Generate and verify .buildinfo file
> * Document verification steps
> h2. Acceptance Criteria
> # tika-grpc JAR builds are reproducible
> # gRPC generated code is deterministic
> # Source archives are reproducible
> # All timestamps are normalized
> # buildinfo file is generated and validates successfully
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
