This is an automated email from the ASF dual-hosted git repository.
pvillard31 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi.git
The following commit(s) were added to refs/heads/main by this push:
new 414ada6e94a NIFI-16252 Added Reproducible Build workflow (#11603)
414ada6e94a is described below
commit 414ada6e94a5786ae0c0a0c86d27f4d6a617af0e
Author: David Handermann <[email protected]>
AuthorDate: Mon Aug 31 12:35:12 2026 -0500
NIFI-16252 Added Reproducible Build workflow (#11603)
---
.github/workflows/reproducible-build.yml | 88 ++++++++++++++++++++++++++++++++
README.md | 1 +
pom.xml | 11 ++++
3 files changed, 100 insertions(+)
diff --git a/.github/workflows/reproducible-build.yml
b/.github/workflows/reproducible-build.yml
new file mode 100644
index 00000000000..1e6dc9de380
--- /dev/null
+++ b/.github/workflows/reproducible-build.yml
@@ -0,0 +1,88 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+name: reproducible-build
+
+on:
+ push:
+ branches-ignore:
+ - dependabot/*
+ pull_request:
+
+env:
+ DEFAULT_MAVEN_OPTS: >-
+ -Xms6g
+ -Xmx6g
+ -Dorg.slf4j.simpleLogger.defaultLogLevel=WARN
+
+permissions:
+ contents: read
+
+jobs:
+ reproducible-build:
+ timeout-minutes: 120
+ runs-on: ubuntu-24.04
+ name: Verify Build Reproducibility
+ env:
+ MAVEN_REPRODUCIBLE_ARGUMENTS: >-
+ --show-version
+ --no-snapshot-updates
+ --no-transfer-progress
+ --fail-fast
+ --activate-profiles apache-release
+ -D skipTests
+ -D gpg.skip=true
+ -D maven.javadoc.skip=true
+ -D develocity.cache.local.enabled=false
+ -D develocity.cache.remote.enabled=false
+ steps:
+ - name: Checkout Code
+ uses: actions/checkout@v7
+ - name: Set up Java 21
+ uses: actions/setup-java@v6
+ with:
+ distribution: 'zulu'
+ java-version: 21
+ cache: 'maven'
+ - name: Install Reference Build
+ env:
+ MAVEN_OPTS: >-
+ ${{ env.DEFAULT_MAVEN_OPTS }}
+ run: >
+ ./mvnw
+ ${{ env.MAVEN_REPRODUCIBLE_ARGUMENTS }}
+ --threads 1C
+ clean install
+ - name: Restore Original Work Tree
+ run: git clean -d -x -f -f
+ - name: Rebuild and Compare Artifacts
+ env:
+ MAVEN_OPTS: >-
+ ${{ env.DEFAULT_MAVEN_OPTS }}
+ run: >
+ ./mvnw
+ ${{ env.MAVEN_REPRODUCIBLE_ARGUMENTS }}
+ -D compare.aggregate.only=true
+ -D buildinfo.reproducible=true
+ clean verify artifact:compare
+ - name: Upload Build Information
+ uses: actions/upload-artifact@v7
+ if: always()
+ with:
+ name: build-information
+ path: |
+ ./**/target/*.buildinfo
+ ./**/target/*.buildcompare
+ retention-days: 3
diff --git a/README.md b/README.md
index c871c48f3fd..d3cf0410939 100644
--- a/README.md
+++ b/README.md
@@ -25,6 +25,7 @@
[](https://github.com/apache/nifi/actions/workflows/docker-tests.yml)
[](https://github.com/apache/nifi/actions/workflows/code-compliance.yml)
[](https://github.com/apache/nifi/actions/workflows/code-coverage.yml)
+[](https://github.com/apache/nifi/actions/workflows/reproducible-build.yml)
[](https://codecov.io/gh/apache/nifi)
### Resources
diff --git a/pom.xml b/pom.xml
index c2a9c3abe96..2d56bf001da 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1148,6 +1148,17 @@
<buildBranch>main</buildBranch>
<maven.build.timestamp>${project.build.outputTimestamp}</maven.build.timestamp>
</properties>
+ <build>
+ <pluginManagement>
+ <plugins>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-artifact-plugin</artifactId>
+ <version>3.6.1</version>
+ </plugin>
+ </plugins>
+ </pluginManagement>
+ </build>
</profile>
<profile>
