Skip to content

New template: Verifiable builds for ts#45

Open
ejacquier wants to merge 2 commits intomainfrom
new-verifiable-template
Open

New template: Verifiable builds for ts#45
ejacquier wants to merge 2 commits intomainfrom
new-verifiable-template

Conversation

@ejacquier
Copy link
Copy Markdown
Contributor

New Template: Verifiable Build (TypeScript)

Summary

New verifiable-build starter template providing reproducible Docker-based builds for
typescript CRE Workflows.

  • Enables third-party verification that deployed workflows match their source code using cre workflow hash
  • Pinned Docker image + frozen lockfile ensures identical WASM binary output across platforms
  • Verified hashes match expected values:
    Binary hash: 03c77e16354e5555f9a74e787f9a6aa0d939e9b8e4ddff06542b7867499c58ea
    Config hash: 3bdaebcc2f639d77cb248242c1d01c8651f540cdbf423d26fe3128516fd225b6
    Workflow hash: 001de36f9d689b57f2e4f1eaeda1db5e79f7991402e3611e13a5c930599c2297

@ejacquier ejacquier requested a review from a team as a code owner March 27, 2026 20:19
@github-actions
Copy link
Copy Markdown

👋 ejacquier, thanks for creating this pull request!

To help reviewers, please consider creating future PRs as drafts first. This allows you to self-review and make any final changes before notifying the team.

Once you're ready, you can mark it as "Ready for review" to request feedback. Thanks!

├── project.yaml
├── secrets.yaml
└── workflow/
├── Dockerfile
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

.dockerignore is worth mentioning. It prevents poisoning the node cache

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed !


### Generating the lockfile

If `bun.lock` is missing, generate it before building:
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

May be worth calling out that this is for if you're the author of this the package.

One thing we should also mention, you need to run this if you change the dependencies too.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed!

@ejacquier ejacquier changed the title New template: Verfiable builds for ts New template: Verifiable builds for ts Mar 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants