mirror of
https://github.com/storytold/figcraft.git
synced 2026-11-10 20:29:33 -06:00
sonar: SHA-1 image names in .fig export are the format's, not a choice
This commit is contained in:
@@ -1,2 +1,8 @@
|
||||
sonar.projectKey=storytold_figcraft
|
||||
sonar.organization=storytold
|
||||
|
||||
# S4790 (weak hash): a .fig file names each image by the SHA-1 of its bytes (20 bytes, the only
|
||||
# length readers accept). It is an identifier the format fixes, not a security choice.
|
||||
sonar.issue.ignore.multicriteria=fig_image_sha1
|
||||
sonar.issue.ignore.multicriteria.fig_image_sha1.ruleKey=rust:S4790
|
||||
sonar.issue.ignore.multicriteria.fig_image_sha1.resourceKey=crates/format/src/fig/export.rs
|
||||
|
||||
Reference in New Issue
Block a user