Skip to content

Make `crypto/md5` a denied import

Brian Williams requested to merge bwill/deny-md5-usage into master

What does this MR do?

FIPS-enabled cryptographic modules do not allow usage of MD5. This change adds depguard to the golangci-lint configuration and configures it so that importing the crypto/md5 package is not allowed. This will cause any usages of MD5 to fail the CI pipeline.

What are the relevant issue numbers?

https://gitlab.com/groups/gitlab-org/-/epics/8033

Does this MR meet the acceptance criteria?

Edited by Brian Williams

Merge request reports