breaking CI if build is not reproducible?

[David A. Wheeler]

> On Jun 7, 2023, at 9:50 AM, Martin Monperrus <martin.monperrus at gnieh.org> wrote:
> 
> Hi all,
> 
> We're researching on build reproducibility.
> 
> Are you aware of any project where reproducibility is checked in a continuous integration pipeline?

I think the Tor project does, but you'd need to ask them to verify.

Some relevant links you might find useful are here:
https://dwheeler.com/trusting-trust#reproducible
It's rather a stream of just some related links & commentary, but I try to put "interesting related things" there.

--- David A. Wheeler