README.md

dev.sigstore:sigstore-maven-plugin RB check

an independently-verifiable path from source to binary code

Project: dev.sigstore:sigstore-maven-plugin

Source code: https://github.com/sigstore/sigstore-java.git

This project defines 2 modules:

• dev.sigstore:sigstore-java
• dev.sigstore:sigstore-maven-plugin

rebuilding 4 releases of dev.sigstore:sigstore-maven-plugin:

• 1 releases were found successfully fully reproducible (100% reproducible artifacts ✅),
• 3 had issues (some unreproducible artifacts ⚠️, see eventual 🔍 diffoscope and/or 📝 issue tracker links):

version	build spec	result: reproducible?	size
1.0.0	gradle jdk11	result: 5 ✅ 3 ⚠️ 🔍	1.7M
0.12.0	gradle jdk11	result: 5 ✅ 3 ⚠️ 🔍	1.7M
0.11.0	gradle jdk11	result: 5 ✅ 3 ⚠️ 🔍	1.7M
0.4.0	mvn jdk11	result: 3 ✅	66K

(size is calculated without javadoc, that has been excluded from reproducibility checks)