And they did not fix the code of their own runners (like GHA) to check the SHA sum either..