You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently a SHA1 hash is used for name generation as a stable fallback if TargetName cannot be bound.
While not specifically used in a security context we should look at replacing this with a newer algorithm or an alternative as SHA1 is generally not recommended.
This may break suppressions because suppression is often done by name.
Also is overkill and could be confusing to have a name as long as a SHA512 so we should truncate the name, or provide some option for configuration related to the number of characters used for name generation.
In lead up to this breaking change we could provide the algorithm as a choice to allow configuration.
Currently a SHA1 hash is used for name generation as a stable fallback if
TargetName
cannot be bound.While not specifically used in a security context we should look at replacing this with a newer algorithm or an alternative as SHA1 is generally not recommended.
This may break suppressions because suppression is often done by name.
Also is overkill and could be confusing to have a name as long as a SHA512 so we should truncate the name, or provide some option for configuration related to the number of characters used for name generation.
In lead up to this breaking change we could provide the algorithm as a choice to allow configuration.
PSRule/src/PSRule/Pipeline/PipelineContext.cs
Lines 64 to 73 in 5967ec1
The text was updated successfully, but these errors were encountered: