For improved reproduciblity, you can build windows executables without the PE timestamps via mingw-w64 by setting:
RUSTFLAGS='-Clink-arg=-Wl,--no-insert-timestamp'
You may use something like this to conditionally set these flags for Windows builds only:
RUSTFLAGS="$RUSTFLAGS $([[ $platform != *"-windows-"* ]] || echo '-Clink-arg=-Wl,--no-insert-timestamp')" \