The address https://coffeylabs.org/specs/well-known-source/ defines: the server's name, version and license, its public repository, and the commit the build was made from. The release images get the commit as INBUXA_REVISION, since their build context has no .git; a build without a full commit id answers 404, as a repository without a revision doesn't name the build.