pungi 4 needs to be able to hash the packages the same as pungi 3 and mash do, in a configurable manner.
https://pagure.io/pungi/pull-request/22
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/pungi/pungi/issues/6
Please continue any further discussion there.