Diff of the two buildlogs:

--
--- b1/build.log	2025-01-30 06:04:54.518183679 +0000
+++ b2/build.log	2025-01-30 06:08:24.184679052 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Wed Jan 29 18:00:54 -12 2025
-I: pbuilder-time-stamp: 1738216854
+I: Current time: Thu Mar  5 02:27:57 +14 2026
+I: pbuilder-time-stamp: 1772627277
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/trixie-reproducible-base.tgz]
 I: copying local configuration
@@ -22,52 +22,84 @@
 dpkg-source: info: unpacking golang-github-owenrumney-go-sarif_2.3.3-2.debian.tar.xz
 I: Not using root during the build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/2964470/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/218209/tmp/hooks/D01_modify_environment starting
+debug: Running on ionos15-amd64.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Mar  4 12:28 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/218209/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/218209/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build/reproducible-path'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='amd64'
-  DEBIAN_FRONTEND='noninteractive'
-  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=20 '
-  DISTRIBUTION='trixie'
-  HOME='/root'
-  HOST_ARCH='amd64'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu")
+  BASH_VERSION='5.2.37(1)-release'
+  BUILDDIR=/build/reproducible-path
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=amd64
+  DEBIAN_FRONTEND=noninteractive
+  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=42 '
+  DIRSTACK=()
+  DISTRIBUTION=trixie
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=x86_64
+  HOST_ARCH=amd64
   IFS=' 	
   '
-  INVOCATION_ID='ed09d1b025cd452693ff0c195ab0d6e7'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='2964470'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=806b838ee6984727843a2ea827b9b1e2
+  LANG=C
+  LANGUAGE=et_EE:et
+  LC_ALL=C
+  MACHTYPE=x86_64-pc-linux-gnu
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnu
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=218209
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.4rdgcGl6/pbuilderrc_Vzbm --distribution trixie --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.4rdgcGl6/b1 --logfile b1/build.log golang-github-owenrumney-go-sarif_2.3.3-2.dsc'
-  SUDO_GID='110'
-  SUDO_UID='105'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://46.16.76.132:3128'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.4rdgcGl6/pbuilderrc_Ym4i --distribution trixie --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.4rdgcGl6/b2 --logfile b2/build.log golang-github-owenrumney-go-sarif_2.3.3-2.dsc'
+  SUDO_GID=111
+  SUDO_UID=106
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://213.165.73.152:3128
 I: uname -a
-  Linux ionos1-amd64 6.1.0-30-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.124-1 (2025-01-12) x86_64 GNU/Linux
+  Linux i-capture-the-hostname 6.12.9+bpo-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.9-1~bpo12+1 (2025-01-19) x86_64 GNU/Linux
 I: ls -l /bin
-  lrwxrwxrwx 1 root root 7 Nov 22 14:40 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/2964470/tmp/hooks/D02_print_environment finished
+  lrwxrwxrwx 1 root root 7 Nov 22  2024 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/218209/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -157,7 +189,7 @@
 Get: 44 http://deb.debian.org/debian trixie/main amd64 golang-golang-x-text-dev all 0.16.0-1 [4003 kB]
 Get: 45 http://deb.debian.org/debian trixie/main amd64 golang-gopkg-vmihailenco-msgpack.v2-dev all 4.3.1-2 [27.5 kB]
 Get: 46 http://deb.debian.org/debian trixie/main amd64 golang-github-zclconf-go-cty-dev all 1.12.1-1 [177 kB]
-Fetched 71.2 MB in 6s (12.7 MB/s)
+Fetched 71.2 MB in 6s (12.0 MB/s)
 Preconfiguring packages ...
 Selecting previously unselected package sensible-utils.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19850 files and directories currently installed.)
@@ -356,7 +388,11 @@
 Building tag database...
  -> Finished parsing the build-deps
 I: Building the package
-I: Running cd /build/reproducible-path/golang-github-owenrumney-go-sarif-2.3.3/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../golang-github-owenrumney-go-sarif_2.3.3-2_source.changes
+I: user script /srv/workspace/pbuilder/218209/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for trixie
+I: user script /srv/workspace/pbuilder/218209/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/golang-github-owenrumney-go-sarif-2.3.3/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../golang-github-owenrumney-go-sarif_2.3.3-2_source.changes
 dpkg-buildpackage: info: source package golang-github-owenrumney-go-sarif
 dpkg-buildpackage: info: source version 2.3.3-2
 dpkg-buildpackage: info: source distribution unstable
@@ -376,81 +412,81 @@
    dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
 dh_auto_build: warning: github.com/owenrumney/go-sarif/test contains no non-test Go files, removing it from build
 dh_auto_build: warning: github.com/owenrumney/go-sarif/v2/test contains no non-test Go files, removing it from build
-	cd _build && go install -trimpath -v -p 20 github.com/owenrumney/go-sarif/example github.com/owenrumney/go-sarif/sarif github.com/owenrumney/go-sarif/v2/sarif
-internal/goarch
-internal/race
+	cd _build && go install -trimpath -v -p 42 github.com/owenrumney/go-sarif/example github.com/owenrumney/go-sarif/sarif github.com/owenrumney/go-sarif/v2/sarif
+internal/unsafeheader
 internal/itoa
-unicode
-math/bits
-internal/asan
-internal/godebugs
-internal/goexperiment
-internal/coverage/rtcov
 internal/goos
-internal/msan
-unicode/utf16
-internal/runtime/syscall
-unicode/utf8
+internal/race
+internal/godebugs
 internal/profilerecord
+internal/coverage/rtcov
+internal/goexperiment
 encoding
-internal/unsafeheader
+internal/runtime/syscall
+internal/goarch
+unicode/utf16
+internal/msan
 cmp
+unicode/utf8
+internal/asan
+internal/byteorder
+unicode
 internal/runtime/atomic
-internal/abi
-runtime/internal/math
-internal/cpu
 sync/atomic
-internal/byteorder
+internal/cpu
+math/bits
+runtime/internal/math
 runtime/internal/sys
+internal/abi
 internal/chacha8rand
-internal/runtime/exithook
 internal/bytealg
+internal/runtime/exithook
 math
 internal/stringslite
 runtime
-internal/reflectlite
-iter
 sync
+iter
+internal/reflectlite
 slices
 internal/bisect
 internal/testlog
-errors
 sort
+errors
 internal/godebug
-strconv
 io
+strconv
 internal/oserror
 path
 syscall
 math/rand
 bytes
-hash
 strings
-hash/crc32
+hash
 hash/crc64
+hash/crc32
 reflect
 golang.org/x/text/transform
 internal/syscall/execenv
-time
 internal/syscall/unix
-io/fs
+time
 internal/poll
+io/fs
 internal/filepathlite
+os
 encoding/binary
 internal/fmtsort
-os
 encoding/base64
 fmt
+math/big
 github.com/zclconf/go-cty/cty/set
 encoding/json
 golang.org/x/text/unicode/norm
-math/big
 github.com/owenrumney/go-sarif/v2/sarif
 github.com/zclconf/go-cty/cty
 github.com/owenrumney/go-sarif/example
 github.com/owenrumney/go-sarif/sarif
    dh_auto_test -O--builddirectory=_build -O--buildsystem=golang
-	cd _build && go test -vet=off -v -p 20 github.com/owenrumney/go-sarif/example github.com/owenrumney/go-sarif/sarif github.com/owenrumney/go-sarif/test github.com/owenrumney/go-sarif/v2/sarif github.com/owenrumney/go-sarif/v2/test
+	cd _build && go test -vet=off -v -p 42 github.com/owenrumney/go-sarif/example github.com/owenrumney/go-sarif/sarif github.com/owenrumney/go-sarif/test github.com/owenrumney/go-sarif/v2/sarif github.com/owenrumney/go-sarif/v2/test
 ?   	github.com/owenrumney/go-sarif/example	[no test files]
 === RUN   Test_create_new_simple_address
 --- PASS: Test_create_new_simple_address (0.00s)
@@ -475,9 +511,9 @@
 === RUN   Test_create_multi_format_message_string_with_markdown
 --- PASS: Test_create_multi_format_message_string_with_markdown (0.00s)
 PASS
-ok  	github.com/owenrumney/go-sarif/sarif	0.060s
+ok  	github.com/owenrumney/go-sarif/sarif	0.016s
 === RUN   Test_new_simple_report_with_single_run
---- PASS: Test_new_simple_report_with_single_run (0.00s)
+--- PASS: Test_new_simple_report_with_single_run (0.01s)
 === RUN   Test_new_report_with_empty_run
 --- PASS: Test_new_report_with_empty_run (0.00s)
 === RUN   Test_new_simple_report_with_artifact
@@ -489,7 +525,7 @@
 === RUN   Test_load_sarif_from_string
 --- PASS: Test_load_sarif_from_string (0.00s)
 === RUN   Test_load_sarif_report_from_file
---- PASS: Test_load_sarif_report_from_file (0.00s)
+--- PASS: Test_load_sarif_report_from_file (0.08s)
 === RUN   Test_err_on_load_sarif_report_from_file_when_not_exists
 --- PASS: Test_err_on_load_sarif_report_from_file_when_not_exists (0.00s)
 === RUN   Test_err_on_load_sarif_report_from_file_when_file_not_legit
@@ -499,7 +535,7 @@
 === RUN   Test_properties_on_a_run
 --- PASS: Test_properties_on_a_run (0.00s)
 PASS
-ok  	github.com/owenrumney/go-sarif/test	0.064s
+ok  	github.com/owenrumney/go-sarif/test	0.183s
 === RUN   Test_create_new_simple_address
 --- PASS: Test_create_new_simple_address (0.00s)
 === RUN   Test_create_new_absolute_address
@@ -513,7 +549,7 @@
 === RUN   Test_create_simple_fix
 --- PASS: Test_create_simple_fix (0.00s)
 === RUN   Test_invocation_with_time_utc
---- PASS: Test_invocation_with_time_utc (0.01s)
+--- PASS: Test_invocation_with_time_utc (0.00s)
 === RUN   Test_create_new_location_relationship
 --- PASS: Test_create_new_location_relationship (0.00s)
 === RUN   Test_create_simple_location
@@ -523,7 +559,7 @@
 === RUN   Test_create_multi_format_message_string_with_markdown
 --- PASS: Test_create_multi_format_message_string_with_markdown (0.00s)
 PASS
-ok  	github.com/owenrumney/go-sarif/v2/sarif	0.056s
+ok  	github.com/owenrumney/go-sarif/v2/sarif	0.030s
 === RUN   Test_new_simple_report_with_single_run
 --- PASS: Test_new_simple_report_with_single_run (0.01s)
 === RUN   Test_new_report_with_empty_run
@@ -549,7 +585,7 @@
 === RUN   Test_properties_on_a_run
 --- PASS: Test_properties_on_a_run (0.00s)
 PASS
-ok  	github.com/owenrumney/go-sarif/v2/test	0.072s
+ok  	github.com/owenrumney/go-sarif/v2/test	0.032s
    create-stamp debian/debhelper-build-stamp
    dh_testroot -O--builddirectory=_build -O--buildsystem=golang
    dh_prep -O--builddirectory=_build -O--buildsystem=golang
@@ -579,12 +615,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: not including original source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/218209/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/218209/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/2964470 and its subdirectories
-I: Current time: Wed Jan 29 18:04:53 -12 2025
-I: pbuilder-time-stamp: 1738217093
+I: removing directory /srv/workspace/pbuilder/218209 and its subdirectories
+I: Current time: Thu Mar  5 02:31:22 +14 2026
+I: pbuilder-time-stamp: 1772627482