@juandesant @foosel Note that it would not solve making the build reproducible (which usually needs a deep change in the code) or signing the commits.