diff --git a/.github/workflows/static-check.yml b/.github/workflows/static-check.yml index b36204c11..589519a00 100644 --- a/.github/workflows/static-check.yml +++ b/.github/workflows/static-check.yml @@ -18,7 +18,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 1 - - uses: WillAbides/setup-go-faster@v1.14.0 + - uses: actions/setup-go@v5 with: go-version: "1.26.x" - uses: dominikh/staticcheck-action@v1.3.1 diff --git a/backend/schedulerd/check_timer.go b/backend/schedulerd/check_timer.go index 675a7c195..5a1b43b11 100644 --- a/backend/schedulerd/check_timer.go +++ b/backend/schedulerd/check_timer.go @@ -1,7 +1,7 @@ package schedulerd import ( - "crypto/md5" + "crypto/sha256" "encoding/binary" time "github.com/echlebek/timeproxy" @@ -33,7 +33,8 @@ type IntervalTimer struct { func NewIntervalTimer(name string, interval uint) *IntervalTimer { // Calculate a check execution splay to ensure // execution is consistent between process restarts. - sum := md5.Sum([]byte(name)) + // Using SHA-256 for FIPS 140-3 compliance. + sum := sha256.Sum256([]byte(name)) splay := binary.LittleEndian.Uint64(sum[:]) timer := &IntervalTimer{splay: splay}