Skip to content

Commit 8b8f1e8

Browse files
AnatoliBCopilot
andauthored
Suppress false positive CodeQL warning on LocalOrchestrationService (#1348)
* Suppress CodeQL warnings for LocalOrchestrationService regarding serialization security in in-proc testing context Co-authored-by: Copilot <copilot@github.com> * Fix suppression syntax Co-authored-by: Copilot <copilot@github.com> --------- Co-authored-by: Copilot <copilot@github.com>
1 parent 06352e0 commit 8b8f1e8

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

src/DurableTask.Emulator/LocalOrchestrationService.cs

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,6 +54,8 @@ public class LocalOrchestrationService : IOrchestrationService, IOrchestrationSe
5454
readonly object timerLock = new object();
5555

5656
readonly ConcurrentDictionary<string, TaskCompletionSource<OrchestrationState>> orchestrationWaiters;
57+
58+
// CodeQL [SM02211] False positive: in-proc test-only emulator; bytes stay in-memory and never cross a trust boundary.
5759
static readonly JsonSerializerSettings StateJsonSettings = new JsonSerializerSettings { TypeNameHandling = TypeNameHandling.Auto };
5860

5961
/// <summary>

0 commit comments

Comments
 (0)