Add SHA1 check to source_url