From 2dbfd9ea5affdbbf45883e9f6121623369e6b259 Mon Sep 17 00:00:00 2001
From: Yeuoly <45712896+Yeuoly@users.noreply.github.com>
Date: Thu, 30 Oct 2025 16:00:44 +0800
Subject: [PATCH] Potential fix for code scanning alert no. 241: Use of a
 broken or weak cryptographic hashing algorithm on sensitive data

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 api/core/trigger/debug/event_bus.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/core/trigger/debug/event_bus.py b/api/core/trigger/debug/event_bus.py
index e5f2ac2c00..9d10e1a0e0 100644
--- a/api/core/trigger/debug/event_bus.py
+++ b/api/core/trigger/debug/event_bus.py
@@ -107,7 +107,7 @@ class TriggerDebugEventBus:
         Returns:
             Event object if available, None otherwise
         """
-        address_id: str = hashlib.sha1(f"{user_id}|{app_id}|{node_id}".encode()).hexdigest()
+        address_id: str = hashlib.sha256(f"{user_id}|{app_id}|{node_id}".encode()).hexdigest()
         address: str = f"trigger_debug_inbox:{tenant_id}:{address_id}"
 
         try: