)]}'
{"keystone/tests/unit/credential/test_fernet_provider.py":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c12e3894b161aba856ef7c50c491ce0e6762cae8","unresolved":false,"context_lines":[{"line_number":65,"context_line":"    def test_encryption_with_null_key(self):"},{"line_number":66,"context_line":"        null_key \u003d fernet_utils.NULL_KEY"},{"line_number":67,"context_line":"        # Below marked as #nosec for Bandit which see\u0027s the below as sha1"},{"line_number":68,"context_line":"        # however the auth is using HMAC-SHA1 which is not considered as"},{"line_number":69,"context_line":"        # insecure right now. https://review.openstack.org/#/c/453365/"},{"line_number":70,"context_line":"        null_key_hash \u003d hashlib.sha1(null_key).hexdigest()  # nosec (lhinds)"},{"line_number":71,"context_line":""}],"source_content_type":"text/x-python","patch_set":2,"id":"7f287b81_f7fe4ead","line":68,"updated":"2017-09-07 18:10:21.000000000","message":"s/the auth/hashlib/ ?\n\nThis comment makes it sound like the naming of the hash from hashlib is not what bandit expects...","commit_id":"df22844e6723f1bd5ab21e0f218db9cab358c932"}]}
