Code? For self-hosting? I hope not. Most programmers shouldn’t be programming internet-facing stuff. (FWIW I include myself in “most programmers”).

Get it from your repository. In that case you are trusting somebody like Debian or Redhat. They’ve earned an awful lot of trust.