SHA checker only checks github dependencies

[phlax]

I think because of the way the data model is structured for dependencies/releases we only added sha checking for github deps, yet the other deps should work fine for this check also.

[phlax]

cc @kfaseela