git's sha256 support is now apparently fully usable for new repositories. And not supported by github or their ilk

So, if you don't want your new program to get uploaded by someone to github (and ingested into their copilot copyright-bypass tool), you could start the project with

git init --object-format=sha256