pin us to the current specific cider SHA