Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There is also an additional benefit to reproducible builds, where getting the same output every time could help avoiding certain regressions. For instance, if GitHub actions performs extensive testing on a particular executable. Then you want to be able to get the exact same executable in the future, not one that is slightly different.


Yes. Reproducibility also makes it possible to aggregate information about the links in dependency trees and distribute trust on that basis.

That stuff is useful to humans, but it is also really useful for cold hard automated logical reasoning about dependency trees.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: