Blocked by corporate OneDrive because of default passwords

[svick]

I work at Microsoft and after I installed PnP.PowerShell 3.2.0, I received 4 emails that a file in my OneDrive was blocked.

The file in question is Documents/PowerShell/Modules/PnP.PowerShell/3.2.0/PnP.PowerShell-Help.xml and the stated issue is that "Purview Information Protection" (whatever that is) marked it as:

Item contains the following sensitive information: CEP: Default Passwords

I can see that your documentation contained in that file does have lines like:

Get-PnPAzureCertificate -Path "mycert.pfx" -Password (ConvertTo-SecureString -String "YourPassword" -AsPlainText -Force)

or:

Register-PnPEntraIDApp -ApplicationName TestApp -Tenant yourtenant.onmicrosoft.com -CertificatePath c:\certificate.pfx -CertificatePassword (ConvertTo-SecureString -String "password" -AsPlainText -Force)

I guess that's what it is complaining about?

[jackpoz]

Sounds like a Purview bug

[gautamdsheth]

Yeah looks like a Purview bug.

Maybe @KoenZomers , you can help your colleague 😉 ?

[KoenZomers]

Correct. These are false positives that trigger on the sample passwords in the help file. I always ignore these warnings. Nothing will happen to you if you do. If you still rather don't want to show up in the Purview reports, instead of doing an install-module, just do a save-module to some local path that is not being synced with OneDrive and use the module from there instead.