Yes, they say "Modules that still use SHA-1 after 2030 will not be permitted for purchase by the federal government" so I wonder... does that mean products that

Yes, they say "Modules that still use SHA-1 after 2030 will not be permitted for purchase by the federal government" so I wonder... does that mean products that can read 2022-era git repos (using sha-1) are they no longer allowed by that date, and so on? There must be exceptions by use case!