1. Build Reproducibility intermediate

    A build produced a different artefact from the same commit two weeks apart. Why does that matter, and what makes builds reproducible?

    2 min answer postmanreproducibilityprovenancedependencies
  2. Build Reproducibility intermediate

    A team proposes making every build hermetic - pinned toolchains and dependencies, no network access during the build, byte-identical output from the same commit. What does that buy and what does it cost?

    3 min answer build-reproducibilityhermetic-buildssupply-chaincaching
  3. Build Reproducibility intermediate Multiple choice

    A team wants the same commit to produce a bit-identical container image on any machine, any day. Which single change contributes most?

    3 min answer reproducibilitypinningdigestsdeterminism
  4. Build Reproducibility advanced Multiple choice

    An IDE vendor with a large shared build farm gives 400 engineers read and write access to the same remote build cache that CI uses, cutting median build time from 14 minutes to 90 seconds. Months later one service starts shipping a binary that nobody can reproduce from a clean checkout. Which change removes the largest class of risk?

    3 min answer build-cacheremote-cachehermetic-buildslsa
  5. Build Reproducibility advanced

    Why do reproducible builds matter beyond supply-chain security, and what makes them hard?

    2 min answer reproducibilitydeterminismcachingdebugging
  6. Build Reproducibility intermediate

    Your pipeline builds a container image from a tagged commit. Rebuilding the same tag two weeks later produces a different digest. The application behaves identically. Where does the difference come from, and which parts should you fix?

    3 min answer reproducibilitydeterminismtimestampsdigests