Skip to content
This repository was archived by the owner on Jan 5, 2026. It is now read-only.

[#6511] CodeQL alert SM02200: Weak hmacs - Suppress alert for WebexClientWrapper#6540

Merged
tracyboehrer merged 1 commit into
mainfrom
southworks/update/SM02200-suppress
Nov 4, 2022
Merged

[#6511] CodeQL alert SM02200: Weak hmacs - Suppress alert for WebexClientWrapper#6540
tracyboehrer merged 1 commit into
mainfrom
southworks/update/SM02200-suppress

Conversation

@ceciliaavila
Copy link
Copy Markdown
Collaborator

Fixes #6511

Description

This PR suppresses the CodeQL SM02200 alert related to using the SHA1 encryption algorithm in WebexClientWrapper class.
The alert can't be fixed because the Webex API uses SHA1 encryption for the messages' signature.

Specific Changes

  • Added comment to suppress SM02200 alert in the ValidateSignature method.

Testing

The unit tests passed after the change.
image

@ceciliaavila ceciliaavila added the Automation: No parity PR does not need to be applied to other languages. label Nov 3, 2022
@ceciliaavila ceciliaavila requested a review from a team as a code owner November 3, 2022 19:28
@tracyboehrer tracyboehrer merged commit 870b958 into main Nov 4, 2022
@tracyboehrer tracyboehrer deleted the southworks/update/SM02200-suppress branch November 4, 2022 14:07
This was referenced May 14, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

Automation: No parity PR does not need to be applied to other languages.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CodeQL alert SM02200: Weak hmacs in microsoft/microsoft/botbuilder-dotnet/botbuilder-dotnet

2 participants