sha is unique for commits within a repository