code: public boolean matches(String digest) {
          String computed = sha1();
          LOGGER.trace("Signature: calculated={} provided={}", computed, digest);
          return StringUtils.equals(computed, digest);
      }
docs: @param digest computed signature from external place (GitHub)
  
  @return true if computed and provided signatures identical