use the trusted build as a source