Skip to content

Reject retired credentials in CLI transports - #397

Open
John-David Dalton (jdalton) wants to merge 1 commit into
mainfrom
jdalton/retired-credential-recovery
Open

John-David Dalton (jdalton) wants to merge 1 commit into
mainfrom
jdalton/retired-credential-recovery

Reject retired credentials in CLI transports

cfada31
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Oct 13, 2026 in 2s

No new alerts in code changed by this pull request

Annotations

Check failure on line 18 in socketsecurity/retired_api_token.py

See this annotation in the file changed.

Code scanning / CodeQL

Use of a broken or weak cryptographic hashing algorithm on sensitive data High

Sensitive data (password)
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.