How to get commit hash from supervisor API

I am trying to use the balena supervisor API to figure out what version of code I am running on various devices. I was hoping that one of these available fields labeled commit or release with what look like sha sums might be git hases, but they don’t seem to match up with what I have in the repository.

Currently, I have to take a two step approach (releaseId → cloud portal → commit hash). Is there something I am missing here?

A little more concretely, a calls to GET /v2/state/status returns a release key which matches the commit key as returned by GET /v1/device but neither seem to correlate well with a balena page or git hash…