(libcloud) branch fix_codeql_atmos_error created (now a078b92d8)

[mi...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

micafer pushed a change to branch fix_codeql_atmos_error
in repository https://gitbox.apache.org/repos/asf/libcloud.git


      at a078b92d8 Fix CodeQL atmos error

This branch includes the following new commits:

     new a078b92d8 Fix CodeQL atmos error

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(libcloud) 01/01: Fix CodeQL atmos error

[mi...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

micafer pushed a commit to branch fix_codeql_atmos_error
in repository https://gitbox.apache.org/repos/asf/libcloud.git

commit a078b92d87af6542b5967244a8bc5a58b1dd4821
Author: Miguel Caballer <mi...@upv.es>
AuthorDate: Mon Jul 20 09:19:10 2026 +0200

    Fix CodeQL atmos error
---
 libcloud/storage/drivers/atmos.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/libcloud/storage/drivers/atmos.py b/libcloud/storage/drivers/atmos.py
index c9d29d326..90a83b016 100644
--- a/libcloud/storage/drivers/atmos.py
+++ b/libcloud/storage/drivers/atmos.py
@@ -109,6 +109,9 @@ class AtmosConnection(ConnectionUserAndKey):
         signature.extend([k + ":" + collapse(v) for k, v in xhdrs])
         signature = "\n".join(signature)
         key = base64.b64decode(self.key)
+        # The Atmos REST authentication protocol mandates HMAC-SHA1. Using a
+        # different digest would produce signatures the service cannot verify.
+        # codeql[py/weak-sensitive-data-hashing]
         signature = hmac.new(b(key), b(signature), hashlib.sha1).digest()
 
         return base64.b64encode(b(signature)).decode("utf-8")