Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reproducible Security Providers #35

Merged
merged 1 commit into from
Nov 11, 2020
Merged

Reproducible Security Providers #35

merged 1 commit into from
Nov 11, 2020

Conversation

nebhale
Copy link
Member

@nebhale nebhale commented Nov 10, 2020

Previously the list of security providers that was passed as an environment variable to launch time was non-deterministic. It was the result of map and would make layers non-reproducible in some cases. This change guarantees the order of the environment variable contents.

[paketo-buildpacks/builder#45]

@nebhale nebhale requested a review from a team November 10, 2020 16:29
@nebhale nebhale added semver:patch A change requiring a patch version bump type:bug A general bug labels Nov 10, 2020
@nebhale nebhale marked this pull request as draft November 10, 2020 16:47
@nebhale nebhale changed the title Deterministic Ordering Reproducible Security Providers Nov 10, 2020
@nebhale nebhale marked this pull request as ready for review November 10, 2020 19:00
Previously the list of security providers that was passed as an environment
variable to launch time was non-deterministic.  It was the result of map and
would make layers non-reproducible in some cases.  This change guarantees the
order of the environment variable contents.

Signed-off-by: Ben Hale <bhale@vmware.com>
@ekcasey ekcasey merged commit e94f1e7 into main Nov 11, 2020
@ekcasey ekcasey deleted the deterministic-ordering branch November 11, 2020 15:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
semver:patch A change requiring a patch version bump type:bug A general bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Reproducible builds with spring boot: Different image names result in different image IDs
2 participants