Add build provenance to release evidence

2026-07-01 16:49:35 +03:00
parent b9dca66d1b
commit e6378e87f5
7 changed files with 102 additions and 10 deletions
@@ -58,6 +58,9 @@ checks only. They are not primary registry release evidence.
 - `rustc` / `cargo` versions;
 - git commit;
 - tag/version;
+- resolved 40-character Git commit SHA;
+- `SOURCE_DATE_EPOCH`;
+- deterministic `BUILD_TIME` derived from `SOURCE_DATE_EPOCH`;
 - checks;
 - artifacts;
 - SBOM;