What changed, and why it matters
This is a trivial build-script cleanup. It removes a duplicate export of the TZ environment variable and moves another environment variable setting earlier in the script. There is no security issue here.
No action needed. This is a benign cleanup commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit refactors contrib/guix/libexec/build.sh to consolidate environment variable exports. TZ=UTC was previously exported twice; the duplicate is removed. TAR_OPTIONS is moved earlier in the script. These are cosmetic/organizational changes with no functional or security impact.
Changed components
contrib/guix/libexec/build.shInspect captured patch +3 / −4
diff --git a/contrib/guix/libexec/build.sh b/contrib/guix/libexec/build.sh
index 1eaa86ae..78976711 100755
--- a/contrib/guix/libexec/build.sh
+++ b/contrib/guix/libexec/build.sh
@@ -4,6 +4,9 @@
# file COPYING or http://www.opensource.org/licenses/mit-license.php.
export LC_ALL=C
set -e -o pipefail
+
+# Environment variables for determinism
+export TAR_OPTIONS="--owner=0 --group=0 --numeric-owner --mtime='@${SOURCE_DATE_EPOCH}' --sort=name"
export TZ=UTC
# Although Guix _does_ set umask when building its own packages (in our case,
@@ -157,10 +160,6 @@ case "$HOST" in
;;
esac
-# Environment variables for determinism
-export TAR_OPTIONS="--owner=0 --group=0 --numeric-owner --mtime='@${SOURCE_DATE_EPOCH}' --sort=name"
-export TZ="UTC"
-
####################
# Depends Building #
####################
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.