sapcc / keppel

81%

master: 81%

LAST BUILD ON BRANCH switch-peer-auth-to-sha256

branch: switch-peer-auth-to-sha256

CHANGE BRANCH

x

Reset

• switch-peer-auth-to-sha256
• SubjectDigest
• account-deletion
• account-deletion-storage-sweep
• account-deletion-stuck
• account-validation-cel-expressions
• allow-reauth-on-anonymous-first-pull-error
• alternate-registry-api-authz
• anycast-support
• api-account-same-account-name
• authz-refactor
• autoupdateable-deps
• bring-repo-up-to-code
• bump-docker
• bye-docker-distribution
• cleanup-licneses
• conformance
• disable-trivy-telemetry
• drop_maintenance
• eager-manifest-handling
• expose-labels
• fix-account-deletion-storage-sweep
• fix-lints
• fix-new-lints
• fix-nolintlint
• fix-shellcheck
• fix-validate
• fix_modernize
• garbage-collection
• gc-delete-untagged
• golangcilint2
• graceful-server-termination
• health-ping
• image-spec
• keppel-vulnerability-status-changed-resource
• kubernetes-driver
• kubernetes-orchestrator
• layer-chunking
• list-repos-manifests-api
• master
• misc
• misc-stuff
• negative-rbac
• new-test-db-infrastructure
• not-rescan-rotten
• obfuscated-errors
• oci-db
• optimize-db-queriesx
• options-everywhere
• persist-trivy-reports
• platform-filter
• protect-subject-manifests
• quotas
• ratelimit
• rbac
• registry-api-audit-trail
• remove-bcrypt
• remove-registry-orchestration
• remove-trivy-dep
• renovate/actions-checkout-5.x
• renovate/external-dependencies
• renovate/github.com-opencontainers-distribution-spec-specs-go-digest
• renovate/github.comsapcc
• renovate/go-github.com-golang-jwt-jwt-v5-vulnerability
• renovate/go-github.com-redis-go-redis-v9-vulnerability
• renovate/go-golang.org-x-crypto-vulnerability
• renovate/major-external-dependencies
• replication-on-first-use
• secret-handling
• serve-persisted-trivy-reports
• storage-sweep
• support-tagpolicy-in-managed-accounts
• swift-federation-driver
• swift-storage-driver-test-coverage
• sync-manifests
• tag-policy
• token-caching
• track-manifest-references
• track-repos-and-tags
• trivial-storage-mutex
• trivy-swift-deletion
• typos
• validation-retry
• vuln_status_changed_at
• vulnerability-scanning

Build # 14707672030

Build Type

Pull #530

github

Committed by majewsky

Commit Message

switch password hash for peer credentials from BCrypt to SHA-256

As explained in the code commit, I find the security tradeoff acceptable
here. This change speeds up the test suite by 40%, and I anticipate
similar, if not better performance gains in production.

Pull Request Pull Request #530: switch password hash for peer credentials from BCrypt to SHA-256

Run Details

17 of 18 new or added lines in 3 files covered. (94.44%)

7509 of 9280 relevant lines covered (80.92%)

164.5 hits per line