How to ensure that binaries match source codes after build?

Question

Programming

There is a project (C#) that is built on a server and subsequently deployed to another. How can you ensure that the compiled binaries correspond to the source codes and have not been modified during the build process (by a virus, trojan, etc.)?

Answer 1

No way. Even building on a second machine and comparing will show differences (for sure) in the binaries. After the build, signing the binary will help you.

Answer 2

I'll leave it here The Black Swan Theory and Fundamental Vulnerability...

Answer 3

So far, only 1 option has come to my mind - this is an isolated server to which no one can connect. And on which only assembly works. This, of course, will not give 100% certainty, but it will still give some kind of guarantee.