Remove installation of bcrypt in Charm code
Closed this issue · 2 comments
Barteus commented
BCrypt is installed during the run of the charm, which is a bad practice.
dex-auth-operator/src/charm.py
Line 26 in 041cabc
It is used to hash the password only. We can use other libraries to perform string hashing which does not require the installation of the additional package.
Additionally, packages installed this way are not scanned during the CVE scanning.
i-chvets commented
Added to be fixed.
i-chvets commented
Low priority.