fix: dismiss gosec warnings

supabase · Sep 25, 2024 · df090f3 · df090f3
1 parent 01bf033
commit df090f3
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/internal/crypto/password.go b/internal/crypto/password.go
@@ -320,6 +320,7 @@ func firebaseScrypt(password, salt, signerKey, saltSeparator []byte, memCost, ro
 	}
 
 	cipherText := make([]byte, aes.BlockSize+len(signerKey))
+	// #nosec G407 -- Firebase scrypt requires deterministic IV for consistent results
 	stream := cipher.NewCTR(block, cipherText[:aes.BlockSize])
 	stream.XORKeyStream(cipherText[aes.BlockSize:], signerKey)
 	return cipherText[aes.BlockSize:], nil