Skip to content

Guides

How to structure release builds

Release builds are slow and occasionally non-reproducible.

5 min read

Release builds are slow and occasionally non-reproducible.

Why it happens

Release pipelines float image versions and rebuild artefacts that were already tested.

How to fix it

  1. Pin runner images and base images by digest in release workflows
  2. Promote the artefact that passed tests rather than rebuilding
  3. Generate provenance and an SBOM during the release build
  4. Keep release workflows in a protected environment

Your next build could be twice as fast, at half the price

Start free. Migrating away is the same one line, and we publish that diff too.