Exploring the guiding principles of reproducible builds to strengthen software supply chain security.