hyperscale-stack / security / 39660730425

99%

master: 98%

Build Type

Pull #136

github

Committed by euskadi31

Commit Message

docs: grpcsec recovery migration, bcrypt wording; review nits

MIGRATION gains the grpcsec section (outer recovery interceptors no
longer see security-pipeline panics; WithPanicHandler) and the
ExtractAuthorizationValue tab row; CHANGELOG lists WithPanicHandler.
The password docs no longer claim one encoding per bcrypt hash: argon2id
verifies its canonical encoding only, bcrypt checks version and cost
while x/crypto ignores what follows the 60th character and the salt's
unused bits (no length check: space-padded fixed-width columns).

Review nits: hashes made by PHP, libsodium and crypt_blowfish are pinned
as fixtures; VerifyCSRF checks the length before decoding (no
allocation for oversized input); the core typed-nil test uses the
generated mocks; unwrapped godoc and doc lines are reflowed.

Audit: I-26, I-30, I-31, I-27.

Pull Request Pull Request #136: fix(core)!: close the core findings of the 2026-10-21 security audit

Coverage Stats

288 of 288 new or added lines in 35 files covered. (100.0%)

1 existing line in 1 file now uncovered.

14756 of 14970 relevant lines covered (98.57%)

5294.75 hits per line