You need to trust your build execution machine anyway. They have your source code and you will be executing the artifacts that they produce!