whacker · HackerTrans

vor 4 Jahrendiscuss

> That also means that unless you build a project on two identical hosts then it is unlikely you will get the same SBOMs.

I don't understand why the author thinks this is such an insurmountable issue.

Reproducible builds are possible with a little care: large parts of Debian are built reproducible. There are tools from https://reproducible-builds.org/

Bazel and similar build systems support reproducible builds, and thus identical SBOMs.

whacker

vor 4 Jahrendiscuss

proto predates gob by quite a bit. gob was introduced with golang, and it's not really used anywhere else.

whacker

vor 5 Jahrendiscuss

Not quite fake: but this might be close enough? https://github.com/kubernetes-sigs/kind

Alternatively you could create a CRI plugin that does what you want. https://github.com/kubernetes/kubernetes/blob/242a97307b3407...

whacker

vor 7 Jahrendiscuss

Out of Band. Registrars cannot intercept whois searches?

comments