content: Good will is a yes. It also helps to up sell developers to azure. Code injection? Really?!? If your project is active, you will catch this shit the first time you do: git push origin master (or whatever branch you are working on). What will happen is that you will be warned and have to do a pull and merge your code. And bingo! Busted. So no. This is highly unlikely. Checking a file hash only helps to ensure code came from XYZ source. But if the source is corrupted, hash helps zero.