{
  "slug": "nerdctl-build-supports-source-policy-file-17fc54ea7088",
  "title": "nerdctl build supports --source-policy-file",
  "tools": [
    "nerdctl"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-05-05T11:38:02.000Z",
  "announced_at": "2026-05-05T11:38:02.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When building a repository image with a BuildKit source policy, run `nerdctl build --source-policy-file <policy.json> <repository-path>`. The policy file is JSON; the documented no-op example is `{\"rules\":[]}`.",
    "examples": [
      "nerdctl build --source-policy-file <policy.json> <repository-path>"
    ],
    "gotchas": [
      "Version: v2.3.0",
      "--source-policy-file <policy.json>: BuildKit source policy JSON file for reproducible builds.",
      "PATH (required): Build context path; the command usage requires `PATH`.",
      "Prerequisite: `buildkitd` must be running for `nerdctl build`."
    ]
  },
  "why_it_matters": "Build a repository image with a source policy file.",
  "sources": [
    "https://github.com/containerd/nerdctl/releases/tag/v2.3.0",
    "https://github.com/containerd/nerdctl/blob/v2.3.0/docs/command-reference.md"
  ],
  "rank": 0.96026,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3-rejudge+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave1b-20261016",
    "verdict_id": "wave1b-20261016:wave1b-20261016-e01e2103240f1c7b-8:rescue",
    "evidence_hash": "1f620bc0db03585a8ad9978fab1277307c59008f27e3ff5a9b121b41213694ff"
  },
  "review": {
    "draft_hash": "d006792d0985100ad001d5892676f748fbb35f257f017795aaba0927b0d08225",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave1b-20261016:rescue",
    "reason": "Rescue path: first rejected only because the extracted card lacked usage; judged again on the enriched card, 3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.96 >= 0.9; 2 needed) and Jev gave 0.60 (>= 0.6 needed)."
  }
}