-
# User Story:
As an OSCAL tool developer, in order to ensure my software can document testing requirements that an information system must implement as one part of cumulative control implementation…
-
This issue was reported in the [Kubernetes Security Audit Report](https://github.com/kubernetes/community/blob/master/wg-security-audit/findings/Kubernetes%20Final%20Report.pdf)
**Description**
Th…
-
From: https://github.com/EntrustCorporation/draft-ounsworth-composite-sigs/issues/145
Address Kris's comments:
ZjQcmQRYFpfptBannerEnd
In the section "B.1 FIPS certification", the draft says:
…
-
# Story
As a customer of galasa, I want to see that it follows all the OpenSSF best practices, so that I can have confidence in the code and how it was developed, and trust that using the code is saf…
-
Hello everyone,
I am implementing the advanced profile part, and I would like to ask, do we support Chinese cryptographic algorithms: SM3 (hash function) and SM2 (public-private key cryptography)?
…
-
Hi,
piWallet uses an insecure hashing algorithm to store user passwords, plain MD5. It's weakened by the fact `strip_tags()` is being run on the plaintext password (why?).
```
$password = md5(…
-
There are a couple of classes of misuse of "pseudo" within the document that conflict with uses elsewhere in the overall RISC-V ISA Specification:
1. All uses of "pseudo-ops" should instead be "pse…
-
- **Package Name**: @azure/identity
- **Package Version**: 3.0.0
- **Operating system**: Windows 11 22H2
- [X] **nodejs**
- **version**: 18.12.0
- [ ] **browser**
- **name/version**: N…
-
May I know who is really Drive-Trust-Alliance? Who is writing the `sedutil` program? Do you have a formal process of CI/CD and QA testing?
- `sedutil` is lacking serious documentation (eg. lacking …
-
##### ISSUE TYPE
* Bug Report
##### COMPONENT NAME
~~~
UI, more?
~~~
##### CLOUDSTACK VERSION
~~~
4.16
~~~
##### CONFIGURATION
##### OS / ENVIRONMENT
RHEL 8 FI…