3 ms·

Of course it will, since you'll either get the commit you wanted at the time you wrote the script, or an error.

• bqmjjx0kac 3y ago
  Unless someone is very good at finding SHA1 collisions.
  • NhanH 3y ago
    The collisions need to deliver malicious payload as well, making it extra hard
  • manwe150 3y ago
    Those are still very hard to get for a random hash, and GitHub I think warns (or blocks?) you if you try to push a hash with a known vulnerability.