Git 2.29 Highlights
github.blog
github.blog
Would it not be easier to do something like the modular crypt people and prefix the SHA-256 with something like `$5$`?
The biggest one of those downsides I think is that the SHA-1 history could be changed out from under you if a new attack was published.