Other Problems
Git doesn't use SHA-1 for a defence against attackers, it uses it as a database key for each file.
If an attacker can rewrite files in your git repo, even if going to the trouble of duplicating a hash, you definitely have Other Problems.
Biting the hand that feeds IT
