alexellis / derek

Reduce maintainer fatigue by automating GitHub
https://github.com/alexellis/derek/blob/master/USER_GUIDE.md
MIT License
806 stars 72 forks source link

Validate HMAC with SHA256 #181

Closed alexellis closed 2 years ago

alexellis commented 2 years ago

Expected Behaviour

Derek should validate HMAC signatures using SHA256

Current Behaviour

Still uses the legacy value of lower length from GitHub

Possible Solution

Implement: https://github.com/alexellis/hmac/issues/1 and then vendor the code back here.

Context

This is technical debt.