[Git][reproducible-builds/reproducible-website][master] 2022-06: https://documentation.suse.com/sbp/server-linux/html/SBP-SLSA4/index.html

[Bernhard M. Wiedemann (@bmwiedemann-guest)]

Bernhard M. Wiedemann pushed to branch master at Reproducible Builds / reproducible-website


Commits:
7c3e6e99 by Bernhard M. Wiedemann at 2022-06-18T16:56:40+02:00
2022-06: https://documentation.suse.com/sbp/server-linux/html/SBP-SLSA4/index.html

- - - - -


1 changed file:

- _reports/2022-06.md


Changes:

=====================================
_reports/2022-06.md
=====================================
@@ -60,7 +60,7 @@ draft: true
 
 * [forwarded 1012836](https://github.com/mapproxy/mapproxy/pull/585)
 
-* [some in-toto provenance files published for SUSE's SLE-15-SP4](https://download.opensuse.org/update/leap/15.4/sle/noarch/) as one result of the SLSA level 4 effort. Old binaries are not rebuilt, so only new builds (e.g. maintenance updates) have this metadata added.
+* [FIXME](https://documentation.suse.com/sbp/server-linux/html/SBP-SLSA4/index.html) SUSE announced on SUSECon that it follows SLSA level 4, however, rpm time stamps are not normalized, so no bit-identical reproducible builds are possible atm ; [some in-toto provenance files published for SUSE's SLE-15-SP4](https://download.opensuse.org/update/leap/15.4/sle/noarch/) as one result of the SLSA level 4 effort. Old binaries are not rebuilt, so only new builds (e.g. maintenance updates) have this metadata added.
 
 * [FIXME](https://www.theregister.com/2022/05/24/pypi_ctx_package_compromised/)
 



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/7c3e6e99da70622b396397e6990cffa1592ed344

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/7c3e6e99da70622b396397e6990cffa1592ed344
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20220618/e39def76/attachment.htm>