Choose SHA1 sums more intelligently

By checking the actual gitbuilder archive that we care about

Signed-off-by: Zack Cerza <zack@redhat.com>