Comments (6)
At least we're not talking about the other hard problem, cache invalidation and off-by-one errors. :-)
I'm fine with changing the docs/text to call it "semantically equivalent build" or similar based on the context, or if we can find a better name that doesn't encroach reproducible-builds, I'd probably be fine with that too.
from ossgadget.
@scovetta thoughts on this?
"Semantically equivalent" seems accurate to describe the methodology/depth of analysis to me, but so does our current "semantically reproducible".
from ossgadget.
Thanks again for your detailed feedback.
I think that were then okay with "semantically equivalent" in the documentation, unless we can think up something better in the next few days before I take the time to update the docs.
from ossgadget.
@david-a-wheeler I opened #429 to update this in the readme and program strings, and ahve also updated the wiki to use "semantic equivalency".
from ossgadget.
Thanks so much! I think "semantically equivalent" is great; it's clearly distinct and I think it gives the sense of what's intended.
I'll post to the reproducible-builds mailing list, I think they'll be pleased.
At a future point it would be cool if the tool could report "semantically equivalent" when that is true, and also indicate "reproducible build' (bit-for-bit) when it can find a way to reproduce it exactly. I should probably file that as a separate issue, because that probably is more than just a doc change :-).
from ossgadget.
Thanks so much! I think "semantically equivalent" is great; it's clearly distinct and I think it gives the sense of what's intended.
No problem. Thanks for the suggestion. I think this makes it very clear.
I'll post to the reproducible-builds mailing list, I think they'll be pleased.
🎉
At a future point it would be cool if the tool could report "semantically equivalent" when that is true, and also indicate "reproducible build' (bit-for-bit) when it can find a way to reproduce it exactly. I should probably file that as a separate issue, because that probably is more than just a doc change :-).
I think that would be a great ability to have - oss reproducible has extensibility via the strategies, I think that would be cool to have checking for bit for bit "reproducible build" be a strategy. I do agree though that that's a larger ask than this update so a fresh issue to track it would be best. If you have any recommendations for what we may be able to leverage to avoid building that strategy from scratch that would also be great to hear.
Thanks
Gabe
from ossgadget.
Related Issues (20)
- oss-metadata for golang (native) errors out
- oss-detect-cryptography directory issues
- oss-detect-backdoor: Add additional patterns HOT 1
- Fail to build Docker image
- Wrong parameter order in OssGadgetLib.cs? HOT 1
- Can not find source for tensorflow and torch package HOT 1
- GITHUB_ACCESS_TOKEN environment variable is never used
- osshealth: NPM purl convention is incomplete, excludes most packages HOT 6
- Don't require encoding for namespaced packages HOT 5
- oss-health doesn't work for github repositories HOT 1
- Please change Reproducible to another term, e.g., Semantically reproducible HOT 5
- Top-level README doesn't note oss-reproducible nor link to its README HOT 2
- Add usage to oss reproducible wiki
- Report if a package is a reproducible build or is just semantically equivalent
- Unable to fetch versions for a Cocoapods package HOT 3
- Replace moq with NSubstitute HOT 2
- Migrate Dockerfile to use Mariner 2
- OSS-Download CLI outputs all output on std error
- Refactor Logging
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ossgadget.