tl;dr: bazel now has a mechanism like make makesum or make makegitcommitid in the isilmar ports.
The full story is slightly more involved. For full details, read my post on Bazel sync and resolved files in the official bazel blog.