ティージェーグレェ on Nostr: I mean, you're kind of correct? It's not the hashes that matter, really, its whether ...

I mean, you're kind of correct?

It's not the hashes that matter, really, its whether the contents are identical.

If the hashes are just that and hash collisions happen!

But for reproducibility, this does unfortunately matter.

Particularly since I am only going down this rabbit hole because GitHub Actions encountering an error which I cannot reproduce locally.

So in rectifying that, it does beg the question: why does GitHub generate tarballs which don't match their own tarballs?

Personally, I would never want to trust GitHub or Micro$oft for anything authoritative, but even it relying upon them as a mirror, it would be nice if they could at least be self-consistent?

They clearly, aren't.