The build.lock branch points to master which means that the layer is not locked. Lock the layers to the commit hash instead; this ensures reproducible builds as much as possible. Change-Id: I66a4ae769d38ba4024bddbbd47cdf62017760405