fixed url/sha