cargo build --locked There is a lockfile, even if it's not respected by default. Doesn't help with build.rs being able to do whatever it wants but it's better

cargo build --locked There is a lockfile, even if it's not respected by default. Doesn't help with build.rs being able to do whatever it wants but it's better than default