Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Better hashlib check for Python 3.9 #805

Merged
merged 2 commits into from Feb 10, 2022
Merged

Better hashlib check for Python 3.9 #805

merged 2 commits into from Feb 10, 2022

Commits on Feb 10, 2022

  1. Better hashlib check for Python 3.9 

    In Python 3.9 and later, the hashlib function has a new keyword
argument usedforsecurity to describe the usage of the hash. In
that way, we can better identify the severity of the error.

Previously, hashlib.md5 and the like were part of the blacklist
check. For Python 3.9, it'll be part of the hashlib plugin so
it can do more advanced checking of usedforsecurity.

Signed-off-by: Eric Brown <browne@vmware.com>
    @ericwb
    ericwb committed Feb 10, 2022
    Configuration menu
    Copy the full SHA
    69c3ade View commit details
    Browse the repository at this point in the history

  2. Update hashlib_insecure_functions.py

    @ericwb
    ericwb committed Feb 10, 2022
    Configuration menu
    Copy the full SHA
    0b542fb View commit details
    Browse the repository at this point in the history