sum == sha256 should be assignment
Commit 4a94d6f5 fixes this issue
Commit 883f34cd fixes this issue
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/koji/koji/issues/2625
Please continue any further discussion there.