ngompa added a new comment to an issue you are following:
``
Nothing would stop us from doing this, except for the fact it's a bad idea. At this
point, I don't care if you have a "whitelist" because that list is
completely arbitrary.
The problem with it is that stuff can shift and change at any time, meaning that the
source content is not stable and there's no way to guarantee anything that remotely
looks like reproducibility. Especially if we're generating from Git repositories,
since Git repositories explicitly allow for rewriting history, such that all refs are
unstable.
``
To reply, visit the link below or just reply to this email
https://pagure.io/releng/issue/7498