github/x509-certificate-exporter
1
0
Fork 0
mirror of https://github.com/enix/x509-certificate-exporter.git synced 2026-08-19 03:56:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
bb50155d48863e4c3567445dc1c3d12a1ad477ac
x509-certificate-exporter/.github/codeql
T
History
Thibault VINCENTandThibault VINCENT 8e3bdfe833 ci(codeql): exclude weak-sensitive-data-hashing for JKS/JCEKS HMAC 
The JKS/JCEKS wire format mandates SHA-1 in its keyed digest
(com.sun.crypto.provider.JceKeyStore.getPreKeyedHash). The exporter
verifies this digest before parsing — it never derives a key or signs
anything. Project-wide suppression is safe because the codebase has
no other password-hashing surface.
2026-05-15 16:54:25 +02:00
..
codeql-config.yml
ci(codeql): exclude weak-sensitive-data-hashing for JKS/JCEKS HMAC
2026-05-15 16:54:25 +02:00