--- title: debauit Announced As Debian Source Package Auditor description: Debaudit is a newly announced set of tools for verifying the integrity and reproducibility of Debian source packages. It consists of three components:... canonical: https://daily.dev/posts/debauit-announced-as-debian-source-package-auditor-pqwusvirr twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: debauit Announced As Debian Source Package Auditor | daily.dev og:description: Debaudit is a newly announced set of tools for verifying the integrity and reproducibility of Debian source packages. It consists of three components:... og:url: https://daily.dev/posts/debauit-announced-as-debian-source-package-auditor-pqwusvirr og:image: https://api.daily.dev/og/posts/PqWUsVirR.png og:image:alt: debauit Announced As Debian Source Package Auditor og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # debauit Announced As Debian Source Package Auditor **[Phoronix](https://daily.dev/sources/phoronix)** · 1 min read · 0 upvotes · 0 comments ## Summary Debaudit is a newly announced set of tools for verifying the integrity and reproducibility of Debian source packages. It consists of three components: upstream2orig (verifies upstream tarballs match original source), git2dsc (verifies source packages from Vcs-Git match the Debian archive), and git2orig (verifies tarballs generated from repositories match archive tarballs). The project aims to secure the software supply chain used to build Debian binary packages by ensuring source code hasn't been maliciously altered during packaging. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Could the XZ backdoor have been detected with better Git and Debian packaging practices?](https://daily.dev/posts/could-the-xz-backdoor-have-been-detected-with-better-git-and-debian-packaging-practices--rg1zju4bp) · Hacker News · 1 upvotes · 0 comments - [Debian's tag2upload Reaches GA For Improving Packaging Workflow](https://daily.dev/posts/debian-s-tag2upload-reaches-ga-for-improving-packaging-workflow-bowfa8k9y) · Phoronix · 0 upvotes · 0 comments - [How to build DORA-ready infrastructure with verifiable provenance and reliable support](https://daily.dev/posts/how-to-build-dora-ready-infrastructure-with-verifiable-provenance-and-reliable-support-mb67e6bfa) · Ubuntu · 0 upvotes · 0 comments - [The best thing about Debian is how old all of its software is](https://daily.dev/posts/the-best-thing-about-debian-is-how-old-all-of-its-software-is-twozzfbfq) · XDA Developers · 1 upvotes · 3 comments - [DevOps Python Supply Chain Security](https://daily.dev/posts/devops-python-supply-chain-security-faxpt5dnc) · Planet Python · 3 upvotes · 0 comments --- Tags: [#open-source](https://daily.dev/tags/open-source), [#linux](https://daily.dev/tags/linux) [View this post on daily.dev](https://daily.dev/posts/debauit-announced-as-debian-source-package-auditor-pqwusvirr) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"debauit Announced As Debian Source Package Auditor","url":"https://daily.dev/posts/debauit-announced-as-debian-source-package-auditor-pqwusvirr","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/debauit-announced-as-debian-source-package-auditor-pqwusvirr"},"datePublished":"2026-03-13T21:58:06.171Z","dateModified":"2026-03-13T21:58:26.148Z","description":"Debaudit is a newly announced set of tools for verifying the integrity and reproducibility of Debian source packages. It consists of three components:...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/428fe67915bdc48132757e6f24732aeb?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/428fe67915bdc48132757e6f24732aeb?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Phoronix","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Phoronix","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/6a26ba379dd64932830aa0c9803dd7ee","url":"https://daily.dev/sources/phoronix"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/debauit-announced-as-debian-source-package-auditor-pqwusvirr","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"open-source,linux","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Phoronix","item":"https://daily.dev/sources/phoronix"},{"@type":"ListItem","position":3,"name":"debauit Announced As Debian Source Package Auditor"}]} ```