Skip to content

LogDrop Taint v1.22.0

Choose a tag to compare

@burak-initialcode burak-initialcode released this 26 Aug 21:19
· 14 commits to main since this release
3047bcb

LogDrop Taint 1.22.0

Signed suppressions. A customer can mark a finding "does not apply to us" in the
panel, and the analyzer honours that judgement — verified offline against a public
key it now embeds, with no request to anything.

The key is a different pair from the licence one. One key for both would mean
anyone able to issue a trial licence could also silence findings in any
repository.

Both analyzers embed the same public half, because one panel signs for both.