Deploy the actual commit ID. Hence we get to verify both the signature and the commit ID.