Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use SOURCE_DATE_EPOCH for OCI CreatedAt times #2878

Merged
merged 1 commit into from
Apr 7, 2023

Conversation

jonjohnsonjr
Copy link
Contributor

@jonjohnsonjr jonjohnsonjr commented Apr 6, 2023

Using time.Now() makes this unreproducible and causes a lot of churn when re-running the same command.

Fixes #2879

Summary

Respect SOURCE_DATE_EPOCH in OCI object generation.

Release Note

The CreatedAt time in generated OCI images now respects SOURCE_DATE_EPOCH.

Documentation

n/a

@jonjohnsonjr jonjohnsonjr force-pushed the sourcedateepoch branch 2 times, most recently from 0564107 to 04f283b Compare April 6, 2023 19:45
@codecov
Copy link

codecov bot commented Apr 6, 2023

Codecov Report

Merging #2878 (236e2e1) into main (8faaee4) will decrease coverage by 0.02%.
The diff coverage is 40.00%.

@@            Coverage Diff             @@
##             main    #2878      +/-   ##
==========================================
- Coverage   30.40%   30.38%   -0.02%     
==========================================
  Files         150      150              
  Lines        9398     9405       +7     
==========================================
+ Hits         2857     2858       +1     
- Misses       6102     6106       +4     
- Partials      439      441       +2     
Impacted Files Coverage Δ
pkg/cosign/env/env.go 88.88% <ø> (ø)
pkg/oci/mutate/signatures.go 32.75% <40.00%> (-0.58%) ⬇️
pkg/oci/static/file.go 62.50% <40.00%> (-5.07%) ⬇️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@jonjohnsonjr jonjohnsonjr marked this pull request as ready for review April 6, 2023 19:52
Using time.Now() makes this unreproducible and causes a lot of churn
when re-running the same command.

Signed-off-by: Jon Johnson <[email protected]>
Copy link
Member

@cpanato cpanato left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you

@cpanato cpanato merged commit de03ebb into sigstore:main Apr 7, 2023
@github-actions github-actions bot added this to the v1.14.0 milestone Apr 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

SBOMs aren't reproducible
3 participants