Technically, you can't know if the code running in the piñata is the same as the one published on Github.