Update insecure-uuid-version.yaml (#3520)

semgrep · Nov 20, 2024 · a5fbe2e · a5fbe2e
1 parent d27718c
commit a5fbe2e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/python/lang/security/insecure-uuid-version.yaml b/python/lang/security/insecure-uuid-version.yaml
@@ -2,7 +2,7 @@ rules:
   - id: insecure-uuid-version
     patterns:
       - pattern: uuid.uuid1(...)
-    message: |
+    message: >-
       Using UUID version 1 for UUID generation can lead to predictable UUIDs based on system information (e.g., MAC address, timestamp). This may lead to security risks such as the sandwich attack. Consider using `uuid.uuid4()` instead for better randomness and security.
     metadata:
       references:
@@ -30,4 +30,4 @@ rules:
     fix-regex:
       regex: uuid1
       replacement: uuid4
-
+