Absolute paths can be different and might be a problem, but line numbers seem harmless. The obvious fix is to replace absolute paths with relative ones when they appear. I think coreboot mostly uses relative ones, while vboot or some other components are build with absolute ones.
git commit hashes
If they can be specified explicitly during build, then one could have the same results when building from a patched tarball.
Originally posted by @SergiiDmytruk in https://github.com/Dasharo/dasharo-issues/issues/889#issuecomment-2180529773