That's a problem for two reasons:
- It doesn't make any sense. If we don't know the SHA for the CommitStatus, we just shouldn't create the CommitStatus. And it should probably be a reconciliation error.
 
- An empty SHA shouldn't be possible The CommitStatus sha field should have validation to ensure it's not empty.