Reproducible Builds: Increasing the Integrity of Software Supply Chains (2020)
arxiv.org