When this test runs against a remote server the commit hash won't likely match the local one. I think its probably ok to just verify that the returned commit is a valid sha1 hash, i.e. 40 hex characters. Its a weaker assertion, but probably ok for our use case if we manually verify the hash is correct once for each hash location.