maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Michael Osipov (JIRA)" <>
Subject [jira] [Commented] (MSHARED-661) Make "Built-By", "Built-Jdk" and "Created-By" Manifest entries optional for reproducible builds
Date Wed, 08 Aug 2018 08:57:00 GMT


Michael Osipov commented on MSHARED-661:

bq. I think it's fine to keep the Created-By and Built-Jdk attributes for now until another
way of capturing the build environment is agreed upon. The Built-By attribute on the other
hand should be removed right off, the identity of the person creating the artifact is already
known with the GPG signature anyway.

I fully agree.

> Make "Built-By", "Built-Jdk" and "Created-By" Manifest entries optional for reproducible
> -----------------------------------------------------------------------------------------------
>                 Key: MSHARED-661
>                 URL:
>             Project: Maven Shared Components
>          Issue Type: New Feature
>          Components: maven-archiver
>            Reporter: Zlika
>            Priority: Minor
> Maven-archiver automatically creates "Built-By", "Build-Jdk" and "Created-By" Manifest
entries. In the frame of a reproducible build (cf. MNG-6276) these entries make the build
not reproducible.
> Maven-archiver should propose an option to disable the creation of these non-reproducible
manifest entries.

This message was sent by Atlassian JIRA

View raw message