These are files that rarely change (CA certificates), but when they do we want to propagate an update downstream that uses the file hash to determine if it needs to be updated and the environment (airflow) needs to be restarted.

The problem is that while the contents of the archive don’t change, the zips include a timestamp as metadata that throws the archive hash off and triggers the environment to be restarted every time.

This blog post describes a `--no-extra`/`-X` flag to

zip

that excludes the metadata, so the zip can be deterministic from the file contents - is there any way to get pants to use this flag for our target?