Yep, I saw that and edited as needed. Isn't there still an attack where you create to different commits to the linux kernel with the same hash? (I presume here

Yep, I saw that and edited as needed. Isn't there still an attack where you create to different commits to the linux kernel with the same hash? (I presume here that a git commit hash is calculated over the diffs, not the end state of the repo). If that is the case, you can still sneak code into the repo, though it would be easy to detect by seeing repos diverge.