Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Talk:Security:Insecure configuration management

From MoodleDocs

Using git and then storing the HEAD hash after an install would be one way you could check if there have been any changes made to the version controlled parts of the code base since you did the install. --Gerard Caulfield 11:52, 16 December 2011 (WST)