search

cloudfoundry / buildpack-packager

Buildpack Packager
Apache License 2.0
23 stars 31 forks source link

Replace md5 by secure hash algorithm like sha256 #17

Closed thardeck closed 6 years ago

thardeck commented 7 years ago

Are there any plans to replace the insecure md5 hash algorithm in the packager by a secure one like sha256?

cf-gitbot commented 7 years ago

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/151913767

The labels on this github issue will be updated when the story is started.

sclevine commented 6 years ago

Hi @thardeck,

Yes, eventually we plan to do this. I'll prioritize this story so you can follow it in our backlog.

sclevine commented 6 years ago

@thardeck This is finished. All buildpacks use sha256 checksums on their develop branch.