·Andrew Leonard
IBM's Independent Verification of Eclipse Temurin Reproducible Builds: A Third-Party CDXA ...
IBM, as a member of the Eclipse Adoptium Working Group, has independently verified Eclipse Temurin JDK 21 and JDK 25 releases on Windows x64 and Linux x64, publishing signed CycloneDX Attestation (CDX...
·Andrew Leonard
Eclipse Temurin Reproducible Verification Builds — August 2026 Update
An update to the 2024 Temurin Reproducible Verification Builds blog. Eclipse Temurin JDK 21+ builds are fully reproducible. This blog explains the new automation scripts, how third-party organisations...
·Andrew Leonard
Eclipse Temurin Reproducible Verification Builds for Secure Supply Chain Validation
Eclipse Temurin JDK 21+ builds are fully reproducible. This blog explains how third-party users can perform an independent secure verification of an Eclipse Temurin build to validate the integrity of ...
·Andrew Leonard
Reproducible Builds at Eclipse Adoptium
Eclipse Adoptium is working towards fully reproducible builds, this blog explains why they are needed and the work ongoing to achieve them.