The build.lock branch points to master which means that the layer is not locked. Lock the layers to the commit hash instead; this ensures reproducible builds as much as possible. Change-Id: Ifab2abfd9dc97a16c32cd88c89f693f30ade0afb