provvedo/wiregui
2
0
Fork 0
Code Issues Pull requests Projects Releases 6 Packages 1 Wiki Activity Actions

ci: exclude weak-sensitive-data-hashing rule from CodeQL

Browse source 
API token hashing uses HMAC-SHA256 on high-entropy tokens (256-bit
random), not passwords. Actual password hashing uses bcrypt.
This commit is contained in:
Stefano Bertelli 2026-04-03 00:55:01 -05:00
parent 604446f8ca
commit 31b31b7946
2 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
.github/workflows/codeql.yml vendored
View file

@ -26,6 +26,7 @@ jobs:
uses: github/codeql-action/init@v3
with:
languages: python
config-file: .github/codeql/codeql-config.yml
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3