Skip to content

Commit 47d3fa7

Browse files
nicklaslclaude
andcommitted
fix(ci): ensure deterministic WASM builds
Disable provenance attestations and set SOURCE_DATE_EPOCH to fix non-deterministic builds in docker/build-push-action@v6. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <[email protected]>
1 parent 520c115 commit 47d3fa7

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

.github/workflows/ci.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,9 @@ jobs:
3535
with:
3636
context: .
3737
push: false
38+
provenance: false
39+
build-args: |
40+
SOURCE_DATE_EPOCH=0
3841
cache-from: type=registry,ref=ghcr.io/${{ github.repository }}/cache:main
3942
secrets: |
4043
"js_e2e_test_env=${{ secrets.JS_E2E_TEST_ENV }}"
@@ -45,6 +48,9 @@ jobs:
4548
with:
4649
context: .
4750
push: false
51+
provenance: false
52+
build-args: |
53+
SOURCE_DATE_EPOCH=0
4854
cache-from: type=registry,ref=ghcr.io/${{ github.repository }}/cache:main
4955
cache-to: type=registry,ref=ghcr.io/${{ github.repository }}/cache:main,mode=max
5056
secrets: |

Dockerfile

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,10 @@
55
# ==============================================================================
66
FROM alpine:3.22 AS rust-base
77

8+
# Accept SOURCE_DATE_EPOCH as a build arg for reproducible builds
9+
ARG SOURCE_DATE_EPOCH=0
10+
ENV SOURCE_DATE_EPOCH=${SOURCE_DATE_EPOCH}
11+
812
# Install system dependencies
913
# - protoc/protobuf-dev: Required for prost-build (proto compilation in build.rs)
1014
# - musl-dev: Required for linking Rust binaries on Alpine

0 commit comments

Comments
 (0)