code: func (s *PluginConstraints) AcceptsSHA256(digest []byte) bool {
  	if s.SHA256 == nil {
  		return true
  	}
  	return bytes.Equal(s.SHA256, digest)
  }
docs: // AcceptsSHA256 returns true if the given executable SHA256 hash is acceptable,
  // either because it matches the constraint or because there is no such
  // constraint.