Dubious Source Code Integrity?

[michimussato]

Hi all

This is not really an issue (as in "bug") but more of a general topic, hence, I post this here in discussions.

So, the thing is, I'm neither really familiar with C/C++ and the like nor with building software in general. However, I do manage to successfully build OpenRV using Dockerfiles I wrote myself as well as an Apptainer (which will work in Rocky and Ubuntu - for now). Sometimes (referring to "I do manage"). This raises the question: why is a build not reproducible?

My suspicion: I don't understand the versioning scheme of this project.

I can see:

• one release (https://github.com/AcademySoftwareFoundation/OpenRV/releases)
• three tags (https://github.com/AcademySoftwareFoundation/OpenRV/tags)
• three branches (https://github.com/AcademySoftwareFoundation/OpenRV/branches/all)

Given these facts, my take on answering above question is: it's not reproducible because it's mere luck whether OpenRV@main is functional or not. What's yours? And, most importantly, how can I create reproducible builds from (proven) functional code?

Thanks all,
Michael