3pp-mirror/pushbits
1
0
Fork 0
mirror of https://github.com/pushbits/server.git synced 2025-06-13 16:12:01 +02:00
Code Issues Projects Releases Packages Wiki Activity

Remove semgrep, use errcheck, gosec, govulncheck

Browse source
This commit is contained in:
eikendev 2023-03-25 23:20:08 +01:00
parent e078a30fe2
commit f251b12fc8
No known key found for this signature in database
GPG key ID: A1BDB1B28C8EF694
19 changed files with 197 additions and 803 deletions
Download patch file Download diff file Expand all files Collapse all files

1
internal/authentication/credentials/hibp.go
View file

@ -22,7 +22,6 @@ func IsPasswordPwned(password string) (bool, error) {
return true, nil
}
// nosemgrep: tests.semgrep-rules.go.lang.security.audit.crypto.insecure-module-used, tests.semgrep-rules.go.lang.security.audit.crypto.use-of-sha1
hash := sha1.Sum([]byte(password)) //#nosec G401 -- False positive, only the first 5 bytes are transmitted.
hashStr := fmt.Sprintf("%X", hash)
lookup := hashStr[0:5]