Skip to content

Repository navigation

Reject retired API credentials before use - #113

Open
John-David Dalton (jdalton) wants to merge 1 commit into
mainfrom
jdalton/retired-credential-recovery
Open

Reject retired API credentials before use#113
John-David Dalton (jdalton) wants to merge 1 commit into
mainfrom
jdalton/retired-credential-recovery

Reject retired API credentials before use

ebc9146
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Oct 13, 2026 in 4s

No new alerts in code changed by this pull request

View all branch alerts.

Annotations

Check failure on line 16 in socketdev/core/retired_token.py

See this annotation in the file changed.

Code scanning / CodeQL

Use of a broken or weak cryptographic hashing algorithm on sensitive data High

Sensitive data (password)
Loading
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
Loading
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
Loading
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
Loading
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.