There are a number of options. For instance, each build could run on a freshly provisioned virtual machine (like Travis CI), or using a carefully crafted sandbox-exec setup.