get the sha from the runtime
remove status related stuff, do that in a follow up pr