actions/actions-runner-controller
1
0
Fork 0
mirror of https://github.com/actions/actions-runner-controller.git synced 2026-01-16 08:44:03 +08:00
Code Issues Packages Projects Releases Wiki Activity

Potential fix for code scanning alert no. 7: Use of a broken or weak cryptographic hashing algorithm on sensitive data (#4353)

Browse Source 
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
Jiaren Wu
2026-01-14 21:04:02 -08:00
committed by GitHub
parent a868229fe0
commit d3ca9de3ca
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
controllers/actions.summerwind.net/multi_githubclient.go
View File

@@ -2,7 +2,7 @@ package actionssummerwindnet
import ( import (
"context" "context"
"crypto/sha1" "crypto/sha256"
"encoding/hex" "encoding/hex"
"fmt" "fmt"
"sort" "sort"
@@ -176,7 +176,7 @@ func (c *MultiGitHubClient) initClientForSecret(secret *corev1.Secret, dependent
sort.SliceStable(ks, func(i, j int) bool { return ks[i] < ks[j] }) sort.SliceStable(ks, func(i, j int) bool { return ks[i] < ks[j] })
hash := sha1.New() hash := sha256.New()
for _, k := range ks { for _, k := range ks {
hash.Write(secret.Data[k]) hash.Write(secret.Data[k])
} }