Eclipse Temurin Reproducible Verification Builds — August 2026 Update
An update to the 2024 Temurin Reproducible Verification Builds blog. Eclipse Temurin JDK 21+ builds are fully reproducible. This blog explains the new automation scripts, how third-party organisations...
External audit of Temurin build and distribution processes
Last year, the Eclipse Foundation engaged the Open Source Technology Improvement Fund to perform an independent audit of the build and distribution processes for Eclipse Temurin.
SLSA build level 3 compliance on Linux and macOS for Eclipse Temurin
Eclipse Temurin by Adoptium is compliant with build level 3 of the SLSA 1.0 secure development framework on Linux and macOS.
Reproducible Comparison Builds
What are reproducible comparison builds addressed and how are they implemented in Adoptium.
Secure Software Development Framework (SSDF) at Adoptium
An overview of the SSDF framework and what we are doing to work towards implementing it
SLSA level 2 compliance for Eclipse Temurin
Eclipse Temurin by Adoptium is compliant with level 2 of the SLSA secure development framework.
Verifying GPG signatures for Temurin downloads
How to verify GPG signatures of the Temurin artifacts using the Eclipse public key