Amazon.Lambda.Core is not deterministic

[martincostello]

Describe the bug

Viewing Amazon.Lambda.Core 2.8.0 in NuGet Package Explorer shows various warnings about the build of the package with respect to Source Link and determinism:

The NuGet packages should be built with ContinuousIntegrationBuild=true and Deterministic=true to resolve this.

.NET global tools such as dotnet-validate and meziantou.framework.nugetpackagevalidation.tool can be used to verify this.

For Amazon.Lambda.Core at least, this doesn't appear to be a regression and these have never been enabled.

Regression Issue

• Select this option if this issue appears to be a regression.

Expected Behavior

Packages should be deterministic, e.g. OpenTelemetry.Instrumentation.AWSLambda@1.13.0:

Current Behavior

NuGet package is not deterministic:

Reproduction Steps

View the NuGet package in NuGet Package Explorer.

Possible Solution

Set ContinuousIntegrationBuild=true and Deterministic=true MSBuild properties when building the NuGet packages for publishing to NuGet.org.

Additional Information/Context

No response

AWS .NET SDK and/or Package version used

Amazon.Lambda.Core 2.8.0

Targeted .NET Platform

All

Operating System and version

All

[GarrettBeatty]

similar to aws/aws-sdk-net#4110 (comment) (has sample code to enable). We will review this with the team. thanks!

[dosolkowski-work]

The dotnet/reproducible-builds repository has documentation and packages to make at least some of this relatively easy.