Comment by brillenfux

Git is essentially a Merkle DAG, thus a single reference to the root object suffices.

Also collisions are only practical with large amounts of padding which would be visible. That's why nobody really cares too much about them for source control systems.