github/x509-certificate-exporter
1
0
Fork 0
mirror of https://github.com/enix/x509-certificate-exporter.git synced 2026-08-20 12:36:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,235 Commits 15 Branches 129 Tags
build/dagger-single-source
Commit Graph
1 Commits
Author SHA1 Message Date
Thibault VINCENTandThibault VINCENT 8e3bdfe833 ci(codeql): exclude weak-sensitive-data-hashing for JKS/JCEKS HMAC 
The JKS/JCEKS wire format mandates SHA-1 in its keyed digest
(com.sun.crypto.provider.JceKeyStore.getPreKeyedHash). The exporter
verifies this digest before parsing — it never derives a key or signs
anything. Project-wide suppression is safe because the codebase has
no other password-hashing surface.
 2026-05-15 16:54:25 +02:00