Re: SLSA Provenance in Apache Commons
Emmanuel Bourg <[email protected]> Tue, 5 May 2026 11:57:03 +0200
| Newsgroups | gmane.comp.jakarta.commons.devel |
|---|---|
| Message-ID | <[email protected]> |
Le 05/05/2026 à 10:33, Piotr P. Karwasz a écrit : > What do you think? Hi Piotr, This all looks quite burdensome. Isn't provenance attestation irrelevant if our builds are reproducible anyway? Emmanuel Bourg