Backfill commit SHAs for tagged Git versions am: decc97eae8 am: d272ef31b0 Original change: https://googleplex-android-review.googlesource.com/c/platform/external/bazel-contrib-supply-chain/+/38083449 Change-Id: Id9dab170c9cc8d54e3d6cb99f4901bc4760819c0 Signed-off-by: Automerger Merge Worker <[email protected]>