The TOR project has been doing some work on deterministic builds to deal with exactly that issue. https://blog.torproject.org/blog/deterministic-builds-part-o...

I never thought that the whole "trusting trust" essay would become a practical reality and an everyday danger that must be mitigated. But welcome to the 21st century. No flying cars, but lots of dystopian cyber punks eager to get in your business.