Some reproducible builds with a confidential VM and use the digest of build artifacts might work.