There are a number of things which may potentially affect the resulting binary which may not be captured by the git metadata. If a user passes some extra feature flags, or specific arguments to cargo this will not be captured. Investigation is needed to see whether this information can be extracted from the cargo metadata.