It pulls in the dirty suffix from the code source while compiling, but can be fixed for the upcoming releases.
See here in Bitcon for an example: https://github.com/bitcoin/bitcoin/blob/master/share/genbuild.sh#L38