Re: [adoptium-pmc] Provide reproducible build verification for Eclipse T

[Andrew Leonard <anleonar@xxxxxxxxxx>]

Hi Carmen,

The "project" is described as "Providing a mechanism for 3rd parties to independently verify the identical reproducibility of an Eclipse Temurin JDK binary, and provide a CycloneDX Attestation XML document confirming."

The exact adoptium.net website checkmark design and details are yet to be decided, but will most likely be in the form of an "icon" possibly with a "counter" on the release download page, in similar manner to the existing "JCK Certified" and "AQAvit Verified" icons:

On Wed, Mar 5, 2025 at 5:09 PM Carmen Delgado via adoptium-pmc <adoptium-pmc@xxxxxxxxxxx> wrote:

Dear Adoptium PMC members, 

Based on the approved 2025 Program Plan and Project Priorities, there is an initiative already under development: “Provide reproducible build verification for Eclipse Temurin” (slide 21 from approved plan and EPIC: Provide the ability for 3rd party Temurin release reproducible Attestation). 

When the proposal was introduced to the Eclipse Foundation Executives in October 2024, one of the pending items was defining the proper naming for both the project and the verification checkmark.

Can you please provide the status on the matter?

Thank you,

Carmen Delgado

Adoptium Community Manager | Eclipse Foundation

eclipse.org | Twitter | LinkedIn | YouTube 

Eclipse Foundation: The Community for Open Innovation and Collaboration

My working day may not be your working day! Please don’t feel obliged to read or reply to this email outside of your normal working hours.

_______________________________________________
adoptium-pmc mailing list
adoptium-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/adoptium-pmc