Backfill commit SHAs for tagged Git versions am: decc97eae8 Original change: https://googleplex-android-review.googlesource.com/c/platform/external/bazel-contrib-supply-chain/+/38083449 Change-Id: Ib8673d1ee552aa097fa219e78b94f408fd40937a Signed-off-by: Automerger Merge Worker <[email protected]>