semgrep-rules
semgrep-rules copied to clipboard
New Rules Proposal: Detect usage of SHA1PRNG in java.
Hello,
This rule, for java language, is intended to detect and raise a warning when SHA1PRNG, a pseudo random number generator algorithm which is considered insecure, is used.
I tested the rule against the sample code using the online rule editor:
Thank you very much for your feedback 😉