What is it about?

The paper reports an interview study with practitioners about the adoption and use of reproducible builds in industry. Reproducible builds are software development practices that reliably build identical binary files from the same source code. Establishing a correspondence between source code and binary has multiple applications in safety-critical software and security.

Featured Image

Why is it important?

Reproducible builds appear to have a wide range of applications in software development, yet little is known about the extent to which they are used in industry. This study investigates industry use of reproducible builds including the range of applications and the reasons businesses adopt or reject the use of reproducible builds.

Perspectives

Correspondence between source code and binary is a simple property that has a range of applications to support and secure software development processes. The views and experiences of practitioners reported provide a stimulating picture of how reproducible builds are used, and may provide inspiration for further applications.

Simon Butler
Hogskolan i Skovde

Read the Original

This page is a summary of: On business adoption and use of reproducible builds for open and closed source software, Software Quality Journal, November 2022, Springer Science + Business Media,
DOI: 10.1007/s11219-022-09607-z.
You can read the full text:

Read

Contributors

The following have contributed to this page