From 21daf3f2658ede4fc3e830de7dd6e1ccfd516a9b Mon Sep 17 00:00:00 2001 From: Tim Allen Date: Wed, 26 Jun 2024 09:37:18 +0100 Subject: [PATCH] Weak hashes (#3963) * Update clean_validation_envs.yml * update * update BRANCH_LAST_ACTIVITY_IN_HOURS_FOR_STOP: 8 * sha2 * update chnagelog * update * update --- .github/scripts/build.js | 2 +- CHANGELOG.md | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/scripts/build.js b/.github/scripts/build.js index e6d17b8f84..9a144926ed 100644 --- a/.github/scripts/build.js +++ b/.github/scripts/build.js @@ -292,7 +292,7 @@ function getRefIdForBranch(branchName) { return createShortHash(`refs/heads/${branchName}\n`); } function createShortHash(ref) { - const hash = createHash('sha1').update(ref, 'utf8').digest('hex') + const hash = createHash('sha2').update(ref, 'utf8').digest('hex') return hash.substring(0, 8); } diff --git a/CHANGELOG.md b/CHANGELOG.md index 6072c83c63..1e83998c24 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -22,6 +22,7 @@ BUG FIXES: * Add workaround to avoid name clashes for storage accounts([#3863](https://github.com/microsoft/AzureTRE/pull/3858)) * Resource processor fails to deploy first workspace on fresh TRE deployment ([#3950](https://github.com/microsoft/AzureTRE/issues/3950)) * Dependency and Vulnerability updates +* Fix Weak hashes ([#3931](https://github.com/microsoft/AzureTRE/issues/3931)) * Add lifecycle rule to MySQL resources to stop them recreating on `update` ([#3993](https://github.com/microsoft/AzureTRE/issues/3993)) * Fixes broken links on 'Using the Azure TRE -> Custom Templates' page of documentation ([[#4003](https://github.com/microsoft/AzureTRE/issues/4003)]) * Fix 'Renew Lets Encrypt Certificates' GitHub Action ([#3978](https://github.com/microsoft/AzureTRE/issues/3978))