Find weak hash algorithms

Proprietary

Finds use of MD5, SHA-1 and RIPEMD-160 (including their HMAC variants, HashAlgorithmName.MD5/SHA1 and Rfc2898DeriveBytes without an explicit hash algorithm, which defaults to SHA-1). These algorithms are broken for collision resistance and must not protect passwords, signatures or integrity checks. Use SHA-256 or stronger.

OpenRewrite.Recipes.CSharp.Security.FindWeakHashAlgorithm

mod run . --recipe=OpenRewrite.Recipes.CSharp.Security.FindWeakHashAlgorithm

Install it once, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.