[repository] we are sha-ish not strict sha