Making reproducible builds & GitBOM work together without gitBOM-ID embedding

[Chris Lamb]

Hey Yongkui,

> […]

Thanks for the detailed update about GitBOM…  although we should
probably get into the habit of calling it OmniBOR now. The support
for detached identifiers is particularly welcome, of course.

Do you have any plans to integrate generation into the default Debian
package build pipeline? Perhaps that is not possible though, as it
would require the overhead and complexity of the tracing framework.


Best wishes,

-- 
      o
    ⬋   ⬊      Chris Lamb
   o     o     reproducible-builds.org 💠
    ⬊   ⬋
      o