Every time a tarball snapshot of a git repo is downloaded from googlesource, the files’ timestamps are set to the request time, meaning that it’s impossible to hash the raw files.