This is an automated email from the ASF dual-hosted git repository. micafer pushed a commit to branch fix_codeql_atmos_error in repository https://gitbox.apache.org/repos/asf/libcloud.git
commit a078b92d87af6542b5967244a8bc5a58b1dd4821 Author: Miguel Caballer <[email protected]> AuthorDate: Mon Jul 20 09:19:10 2026 +0200 Fix CodeQL atmos error --- libcloud/storage/drivers/atmos.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libcloud/storage/drivers/atmos.py b/libcloud/storage/drivers/atmos.py index c9d29d326..90a83b016 100644 --- a/libcloud/storage/drivers/atmos.py +++ b/libcloud/storage/drivers/atmos.py @@ -109,6 +109,9 @@ class AtmosConnection(ConnectionUserAndKey): signature.extend([k + ":" + collapse(v) for k, v in xhdrs]) signature = "\n".join(signature) key = base64.b64decode(self.key) + # The Atmos REST authentication protocol mandates HMAC-SHA1. Using a + # different digest would produce signatures the service cannot verify. + # codeql[py/weak-sensitive-data-hashing] signature = hmac.new(b(key), b(signature), hashlib.sha1).digest() return base64.b64encode(b(signature)).decode("utf-8")
