We have byte-by-byte reproducible builds of everything at Polar Signals, including container images. We just migrated from podman to buildkit, and it looks like producing provenance information includes build times, ultimately breaking reproducibility. Is there any way to fix this?
Add comment