I found coreutils RPM is too old on Amazon Linux 2.
sha256sum (GNU coreutils) 8.22
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Written by Ulrich Drepper, Scott Miller, and David Madore.
I tried to use goreleaser bash tool but failed, since old sha256sum command does not have --ignore-missing option.
I checked the coreutils changelogs and understood --ignore-missing option is introduced to sha256sum 7 years ago, coreutils version 8.25.
Could AL2 provide the newer version of coreutils RPM?