Comment by zephyr9

> many tools and developers rely on or automatically assume that commit hashes are collision resistant.

Solution seems to be don't. Use the tool as the tool was intended.