url repo and SHA