Reproducible Build

Definitions

1. A build process that produces bit-for-bit identical output given the same source code, build environment, and dependencies. Enables independent verification that a binary wasn't tampered with. Challenges include timestamps, randomized compilation, and non-deterministic dependency resolution. Required for SLSA Level 3 and supply chain security.

   In plain English: A build that produces the exact same output every time, proving nobody tampered with it between source code and binary.

   Example: "The reproducible build produces the exact same SHA-256 hash every time -- anyone can verify our release binary matches the source code."

Related Terms

• Build Context
• Cabal
• Cargo
• Compiler
• Cross-Compilation
• Deployment
• Hashing
• Build Cache