commit_id is not necessary (not used anymore), sha is specified in request uri