The GitHub Actions job "Tests" on airflow.git/f-003-csprng-passwords has failed.
Run started by GitHub user potiuk (triggered by potiuk).

Head commit for run:
3c5d4380602922c80646def65604021608ed05cb / Jarek Potiuk <[email protected]>
Use cryptographically secure RNG for SimpleAuthManager passwords

SimpleAuthManager generated initial passwords with random.choices() — a
non-cryptographic PRNG. Switch to secrets.choice() so the generated
passwords use a CSPRNG.

SimpleAuthManager is dev-only and the password is printed once at startup,
so practical risk is low, but the fix is one line and removes a
misleading signal in security audits.

Report URL: https://github.com/apache/airflow/actions/runs/25472364958

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to