This MR adds hash calculations to !54608 (merged). This could potentially be a larger discussion, which this MR is intended to be a container for.
According to the JSON schema that we're working on for improving vulnerability tracking (gitlab-org/security-products/security-report-schemas!69 (diffs)), we are planning to have a hash
tracking type that can contain an arbitrary list of strings.
The default algorithm of the hash
tracking type is the hash
algorithm, which simply hashes the provided data.
This MR calculates the hash
algorithm signature for the hash
tracking types.
If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:
@gitlab-com/gl-security/appsec