cake-build/resources

build.ps1 uses MD_5 which is forbidden on FIPS compliant computers

DanFTRX opened this issue · 2 comments

FIPS enabled computers will fail to create an MD5Hasher in all cases. Are there alternative FIPS compliant hashes that can be used to verify the nuget downloads?

https://github.com/cake-build/resources/blob/develop/build.ps1#L82

I would recommend bootstrapping using .NET Core tool manifest, it's FIPS compliant, you can read more about it at:
https://cakebuild.net/docs/getting-started/bootstrapping-scripts#bootstrapping-for.net-core-tool

Thanks.