The build.lock branch points to master which means that the layer is not locked. Lock the layers to the commit hash instead; this ensures reproducible builds as much as possible. Change-Id: Ica9a1d7235a3d23e02f8e10dfcf5352ea7a705ed