Merge pull request #2207 from storytold/sonar/format-mandated-sha1

sonar: SHA-1 image names in .fig export are the format's, not a choice
This commit is contained in:
FredApps authored and GitHub committed 2026-11-10 18:45:47 +01:00
commit be991533b0
1 file changed
+6
+6
View File
@@ -1,2 +1,8 @@
sonar.projectKey=storytold_figcraft sonar.projectKey=storytold_figcraft
sonar.organization=storytold sonar.organization=storytold
# S4790 (weak hash): a .fig file names each image by the SHA-1 of its bytes (20 bytes, the only
# length readers accept). It is an identifier the format fixes, not a security choice.
sonar.issue.ignore.multicriteria=fig_image_sha1
sonar.issue.ignore.multicriteria.fig_image_sha1.ruleKey=rust:S4790
sonar.issue.ignore.multicriteria.fig_image_sha1.resourceKey=crates/format/src/fig/export.rs