[Rpm-maint] [rpm-software-management/rpm] Pristine and verifiable source releases (Issue #3565)

[Michal Domonkos]

> Note that last I heard, git makes no promises that the output of `git archive` will forever be reproducible

Now I realize this is the reason for you attaching a custom tarball, i.e. to make *that* reproducible. (Default GH tarballs are most likely static, after all.) Makes sense.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/3565#issuecomment-2655019821
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/3565/2655019821 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20250212/08a4a828/attachment-0001.htm>