Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: services/util/SesameSecured: avoid timing attack on verifying MAC #818

Merged
merged 1 commit into from
Feb 7, 2025

Conversation

richardapeters
Copy link
Collaborator

No description provided.

@richardapeters richardapeters requested a review from a team as a code owner February 7, 2025 06:43
Copy link
Contributor

github-actions bot commented Feb 7, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails

Scanned Files

Copy link
Contributor

github-actions bot commented Feb 7, 2025

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 12 0 0.05s
✅ CPP clang-format 1002 3 0 6.34s
✅ DOCKERFILE hadolint 2 0 0.16s
✅ JSON jsonlint 7 0 0.19s
✅ JSON prettier 7 0 0 0.66s
⚠️ MARKDOWN markdownlint 6 0 4 1.24s
⚠️ MARKDOWN markdown-link-check 6 1 109.77s
✅ MARKDOWN markdown-table-formatter 6 0 0 0.21s
✅ REPOSITORY checkov yes no 18.7s
✅ REPOSITORY git_diff yes no 0.05s
✅ REPOSITORY grype yes no 9.16s
✅ REPOSITORY ls-lint yes no 0.07s
✅ REPOSITORY secretlint yes no 6.13s
✅ REPOSITORY trivy yes no 5.19s
✅ REPOSITORY trivy-sbom yes no 0.08s
✅ REPOSITORY trufflehog yes no 3.45s
⚠️ SPELL lychee 137 1 4.58s
⚠️ YAML prettier 22 1 1 0.86s
✅ YAML v8r 22 0 8.67s
✅ YAML yamllint 22 0 0.45s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by OX Security

Copy link

sonarqubecloud bot commented Feb 7, 2025

@esalman-philips esalman-philips added this pull request to the merge queue Feb 7, 2025
Merged via the queue into main with commit 51dca2d Feb 7, 2025
35 checks passed
@esalman-philips esalman-philips deleted the feature/sesame-timing-attack branch February 7, 2025 08:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants