)]}'
{"oslo_utils/tests/test_secretutils.py":[{"author":{"_account_id":6928,"name":"Ben Nemec","email":"openstack@nemebean.com","username":"bnemec"},"change_message_id":"655523518e7a7e426a902d67cf281c8b2db959f9","unresolved":false,"context_lines":[{"line_number":25,"context_line":"                      test_base.BaseTestCase):"},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"    _gen_digest \u003d lambda text: hmac.new(b\u0027foo\u0027, text.encode(\u0027utf-8\u0027),"},{"line_number":28,"context_line":"                                        digestmod\u003dhashlib.md5).digest()"},{"line_number":29,"context_line":"    scenarios \u003d ["},{"line_number":30,"context_line":"        (\u0027binary\u0027, {\u0027converter\u0027: _gen_digest}),"},{"line_number":31,"context_line":"        (\u0027unicode\u0027, {\u0027converter\u0027: lambda text: text}),"}],"source_content_type":"text/x-python","patch_set":2,"id":"7faddb67_f3c0704c","line":28,"updated":"2019-08-21 16:21:09.000000000","message":"I realize that we\u0027re just using this to generate some binary data for testing, but I wonder if we should take this opportunity to change algorithms. Security people tend to get twitchy when they see md5.\n\nI think using hashlib.sha1 should accomplish the same thing and not trigger code security tools.","commit_id":"892699e9d1bc9253f57da7849519e6e2e49c91f6"}]}
