weak hashing functions MD5
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- TypeScript
- Stars
- 5.9k
- Forks
- 1.8k
- PR merge metrics
- No merged PRs in 30d
Description
Describe the enhancement
MD5 is a weak hash function and should not be used for security purposes. It is also not supported by the hash function in Azure Logic Apps. It would be nice to have a SHA256 hash function available.
Code Snippet
use sha256 instead of md5
Additional information
None
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at packages/artifact/src/internal/utils.ts around line 311 and inspect how the current MD5 hash is used. Replace that hashing choice with SHA256 as requested, then verify the artifact utility still produces the expected hash behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- security
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100