From 58d972709280e427a12aa51a9b648b9d39626106 Mon Sep 17 00:00:00 2001 From: Nikolay Krasko Date: Thu, 15 Jun 2023 10:38:33 +0200 Subject: [PATCH] Remove *.spdx.json.md5 and *.spdx.json.sha1 from reproducible file --- scripts/build-kotlin-maven.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/build-kotlin-maven.sh b/scripts/build-kotlin-maven.sh index 83331f450b6..8c1e810e9d7 100755 --- a/scripts/build-kotlin-maven.sh +++ b/scripts/build-kotlin-maven.sh @@ -51,7 +51,7 @@ cp -R build/repo/. build/repo-reproducible # maven-metadata contains lastUpdated section with the build time find build/repo-reproducible -name "maven-metadata.xml*" -exec rm -rf {} \; # spdx SBOM contains creationInfo with datetime -find build/repo-reproducible -name "*.spdx.json" -exec rm -rf {} \; +find build/repo-reproducible -name "*.spdx.json*" -exec rm -rf {} \; # Each file has own timestamp that would affect zip file hash if not aligned find build/repo-reproducible -exec touch -t "198001010000" {} \; cd build/repo-reproducible && find . -type f | sort | zip -X reproducible-maven-$DEPLOY_VERSION.zip -@ && cd -