Suppress SM05220 in src/DurableTask.AzureStorage/MessageManager.cs (#1342)

AnatoliB · Copilot · web-flow · commit a96402ad9c88 · 2026-05-11T16:41:05.000-07:00
* Suppress SM05220 in `src/DurableTask.AzureStorage/MessageManager.cs` Resolving https://msazure.visualstudio.com/Antares/_workitems/edit/37181656 Co-authored-by: Copilot <copilot@github.com> * Fix suppression syntax Co-authored-by: Copilot <copilot@github.com> --------- Co-authored-by: Copilot <copilot@github.com>
diff --git a/src/DurableTask.AzureStorage/MessageManager.cs b/src/DurableTask.AzureStorage/MessageManager.cs
@@ -372,6 +372,7 @@ public void BindToName(Type serializedType, out string assemblyName, out string
             TypeNameSerializationHelper.BindToName(customBinder, serializedType, out assemblyName, out typeName);
         }
 
+        // CodeQL [SM05220] False positive: customer-owned Storage is inside the DTFx trust boundary.
         public Type BindToType(string assemblyName, string typeName)
         {
             return TypeNameSerializationHelper.BindToType(customBinder, assemblyName, typeName);
@@ -391,6 +392,7 @@ public override void BindToName(Type serializedType, out string assemblyName, ou
             TypeNameSerializationHelper.BindToName(customBinder, serializedType, out assemblyName, out typeName);
         }
 
+        // CodeQL [SM05220] False positive: customer-owned Storage is inside the DTFx trust boundary.
         public override Type BindToType(string assemblyName, string typeName)
         {
             return TypeNameSerializationHelper.BindToType(customBinder, assemblyName, typeName);

Original file line number	Diff line number	Diff line change
`@@ -372,6 +372,7 @@ public void BindToName(Type serializedType, out string assemblyName, out string`
`372`	`372`	`TypeNameSerializationHelper.BindToName(customBinder, serializedType, out assemblyName, out typeName);`
`373`	`373`	`}`
`374`	`374`
	`375`	`+ // CodeQL [SM05220] False positive: customer-owned Storage is inside the DTFx trust boundary.`
`375`	`376`	`public Type BindToType(string assemblyName, string typeName)`
`376`	`377`	`{`
`377`	`378`	`return TypeNameSerializationHelper.BindToType(customBinder, assemblyName, typeName);`
`@@ -391,6 +392,7 @@ public override void BindToName(Type serializedType, out string assemblyName, ou`
`391`	`392`	`TypeNameSerializationHelper.BindToName(customBinder, serializedType, out assemblyName, out typeName);`
`392`	`393`	`}`
`393`	`394`
	`395`	`+ // CodeQL [SM05220] False positive: customer-owned Storage is inside the DTFx trust boundary.`
`394`	`396`	`public override Type BindToType(string assemblyName, string typeName)`
`395`	`397`	`{`
`396`	`398`	`return TypeNameSerializationHelper.BindToType(customBinder, assemblyName, typeName);`