Hacker News Reader

If you actually had reproducible builds, the build date would not tell you anything about how out of date the software is—you would only need the date of the source code the binary was built from. By definition, the binary you'd get from building a version of the source today would be identical to the version you'd get building it the day that version of the source was finished.

In that case, you can report the Git SHA and still be reproducible.

You can still include the git commit id and its date on the build.