For that, we use reproducible builds. No need for signature checks.