Documentation
¶
Overview ¶
Package reprobuild verifies that the release wasm build is reproducible: two independent builds of the same commit must produce byte-identical artifacts (the provenance attestation implicitly promises this). The `-trimpath` flag the release profile sets is what makes the output path-independent and thus deterministic.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func BuildWasmSHA ¶
BuildWasmSHA builds parsePackage for js/wasm with the release flags (-trimpath -ldflags "-s -w") into a throwaway file under parseTempDir and returns the lowercase hex SHA-256 of the resulting artifact.
func SHAMatches ¶
SHAMatches reports whether two artifact digests are identical. It is the comparison the reproducibility check uses; a single differing byte (for example an embedded build timestamp) yields different digests and a false result, so nondeterminism is caught rather than silently accepted.
Types ¶
This section is empty.
Source Files