Repository navigation
LogDrop Taint v1.22.0
·
14 commits
to main
since this release
LogDrop Taint 1.22.0
Signed suppressions. A customer can mark a finding "does not apply to us" in the
panel, and the analyzer honours that judgement — verified offline against a public
key it now embeds, with no request to anything.
The key is a different pair from the licence one. One key for both would mean
anyone able to issue a trial licence could also silence findings in any
repository.
Both analyzers embed the same public half, because one panel signs for both.