Skip to content

Conversation

@moskyb
Copy link
Contributor

@moskyb moskyb commented Nov 4, 2025

Description

When the FIPS140 mode is set to only, the agent produces a confusing error message:

fatal: failed to upload artifacts: collecting artifacts: building artifact: reading contents of /path/to/some/artifact: crypto/sha1: use of SHA-1 is not allowed in FIPS 140-only mode

the reading contents of in there makes it seem like we're failing to read the file, but we're actually failing to hash it. This failure to hash is also pointed out by the rest of the error message, but it's useful to be explicit.

Context

PS-1373

Testing

  • Tests have run locally (with go test ./...). Buildkite employees may check this if the pipeline has run automatically.
  • Code is formatted (with go fmt ./...)

Disclosures / Credits

This twelve-character change was generated entirely by my human brain.

@moskyb moskyb requested a review from DrJosh9000 November 4, 2025 05:10
@DrJosh9000
Copy link
Contributor

Quick question: do we use the SHA-1 hash for anything anymore?

@moskyb moskyb merged commit 8404fb0 into main Nov 10, 2025
1 check passed
@moskyb moskyb deleted the hashing-error-message branch November 10, 2025 01:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants