aleleba/pdfcraft
1
0
Fork 0
mirror of https://github.com/storytold/pdfcraft.git synced 2026-10-24 10:08:00 -06:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #4169 from dylanmtaylor/chore/sonar-scope-vendor-and-spec-hashes

Browse Source 
chore(sonar): exclude vendored crates and the spec-mandated MD5/RIPEMD-160 (SonarCloud rust:S4790)
This commit is contained in:
Dylan M. Taylor
2026-10-22 22:48:42 -04:00
committed by GitHub
parent de91632934 bd9030b271
commit 1d29f0673c
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sonar-project.properties
+14
View File
@@ -1,2 +1,16 @@
sonar.projectKey=storytold_pdfcraft
sonar.organization=storytold
# vendor/ holds third-party crates carried with small, marked patches (vendor/README.md).
# They are kept close to upstream so each copy can be dropped once upstream releases the
# fix; restyling them would only make that harder, so they are not analysed here.
sonar.exclusions=vendor/**
# S4790 (weak hash): MD5 is the hash ISO 32000 mandates for the RC4/AES-128 standard security
# handler (Algorithms 1-5), and RIPEMD-160 is a digest existing signatures may name. Both are
# needed to open and verify existing files, not chosen for new security.
sonar.issue.ignore.multicriteria=crypt_md5,sign_ripemd
sonar.issue.ignore.multicriteria.crypt_md5.ruleKey=rust:S4790
sonar.issue.ignore.multicriteria.crypt_md5.resourceKey=crates/crypt/src/lib.rs
sonar.issue.ignore.multicriteria.sign_ripemd.ruleKey=rust:S4790
sonar.issue.ignore.multicriteria.sign_ripemd.resourceKey=crates/sign/src/keys.rs