Potential fix for pull request finding 'CodeQL / Insecure randomness'

matt-aitken · github-advanced-security[bot] · web-flow · commit 7292806d1df0 · 2026-04-23T20:56:24.000+01:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/apps/webapp/test/helpers/seedTestEnvironment.ts b/apps/webapp/test/helpers/seedTestEnvironment.ts
@@ -1,7 +1,8 @@
 import type { PrismaClient } from "@trigger.dev/database";
+import { randomBytes } from "crypto";
 
 function randomHex(len = 12): string {
-  return Math.random().toString(16).slice(2, 2 + len).padEnd(len, "0");
+  return randomBytes(Math.ceil(len / 2)).toString("hex").slice(0, len);
 }
 
 export async function seedTestEnvironment(prisma: PrismaClient) {

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,8 @@`
`1`	`1`	`import type { PrismaClient } from "@trigger.dev/database";`
	`2`	`+import { randomBytes } from "crypto";`
`2`	`3`
`3`	`4`	`function randomHex(len = 12): string {`
`4`		`- return Math.random().toString(16).slice(2, 2 + len).padEnd(len, "0");`
	`5`	`+ return randomBytes(Math.ceil(len / 2)).toString("hex").slice(0, len);`
`5`	`6`	`}`
`6`	`7`
`7`	`8`	`export async function seedTestEnvironment(prisma: PrismaClient) {`