The address https://coffeylabs.org/specs/well-known-source/ defines:
the server's name, version and license, its public repository, and the
commit the build was made from. The release images get the commit as
INBUXA_REVISION, since their build context has no .git; a build without
a full commit id answers 404, as a repository without a revision
doesn't name the build.