Pass full committish to source package script

source.git is no longer a bare mirror. This change fixes a problem
where the source got built using an older commit.

Change-Id: If2326aa92c1f65c2d76408c67a4bf55d2198f614