These whitespaces scare me. If someone manually fiddles with the sha and types `# sha256:XYZ.....` then this one doesn't get included.