CycloneDX / CycloneDX/cyclonedx-python
feat: respect env var `$SOURCE_DATE_EPOCH` when generating SBOM
Open
enhancement
help wanted
- Dominant language
- Python
- Stars
- 390
- Forks
- 98
- Avg merge
- 2d 14h
- Merged PRs (30d)
- 1
Description
## Is your feature request related to a problem? Please describe.
The timestamp should be set to $SOURCE_DATE_EPOCH env var, so that builds are deterministic and can be reproduced at some point in the future.
## Describe the solution you'd like
More explanation here: https://reproducible-builds.org/docs/source-date-epoch/
Contributor guide
Assessment
This issue has not been assessed yet.