mirror of
https://github.com/storytold/figcraft.git
synced 2026-11-11 01:21:17 +00:00
Merge pull request #2207 from storytold/sonar/format-mandated-sha1
sonar: SHA-1 image names in .fig export are the format's, not a choice
This commit is contained in:
@@ -1,2 +1,8 @@
|
||||
sonar.projectKey=storytold_figcraft
|
||||
sonar.organization=storytold
|
||||
|
||||
# S4790 (weak hash): a .fig file names each image by the SHA-1 of its bytes (20 bytes, the only
|
||||
# length readers accept). It is an identifier the format fixes, not a security choice.
|
||||
sonar.issue.ignore.multicriteria=fig_image_sha1
|
||||
sonar.issue.ignore.multicriteria.fig_image_sha1.ruleKey=rust:S4790
|
||||
sonar.issue.ignore.multicriteria.fig_image_sha1.resourceKey=crates/format/src/fig/export.rs
|
||||
|
||||
Reference in New Issue
Block a user