Skip to content

Commit 364eb7d

Browse files
committed
Fix PoliCheck InvalidArgumentsError (remove missing exclusion file path); fix CredScan suppression format
1 parent 5460165 commit 364eb7d

File tree

2 files changed

+4
-8
lines changed

2 files changed

+4
-8
lines changed

.Pipelines/credscan-exclusion.json

Lines changed: 4 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -2,15 +2,12 @@
22
"tool": "Credential Scanner",
33
"suppressions": [
44
{
5-
"placeholder": "placeholder",
6-
"_justification": "tests/certificate-with-password.pfx is a test fixture certificate used only in unit tests. It is not a production credential.",
7-
"file": "tests/certificate-with-password.pfx"
5+
"file": "certificate-with-password.pfx",
6+
"_justification": "Self-signed certificate used only in unit tests. Not a production credential."
87
},
98
{
10-
"placeholder": "placeholder",
11-
"_justification": "tests/test_mi.py line 385 contains a WWW-Authenticate challenge header value used as a test fixture in a mock HTTP response. It is not a real credential.",
12-
"file": "tests/test_mi.py",
13-
"line": "385"
9+
"file": "test_mi.py",
10+
"_justification": "WWW-Authenticate challenge header value used as a mock HTTP response fixture in unit tests. Not a real credential."
1411
}
1512
]
1613
}

.Pipelines/template-pipeline-stages.yml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,6 @@ stages:
5757
displayName: 'Run PoliCheck'
5858
inputs:
5959
targetType: F
60-
optionsUEPATH: '$(Build.SourcesDirectory)/build/policheck_exclusion.xml'
6160
continueOnError: true
6261

6362
- task: securedevelopmentteam.vss-secure-development-tools.build-task-credscan.CredScan@3

0 commit comments

Comments
 (0)