Changes to consider FluentUI.Demo/keystore.jks as exception for credscan. Its contains self-signed key on APK creation
This commit is contained in:
Родитель
98cb5ed3a8
Коммит
1ff29f6183
|
@ -0,0 +1,9 @@
|
|||
{
|
||||
"tool": "Credential Scanner",
|
||||
"suppressions": [
|
||||
{
|
||||
"file": "FluentUI.Demo/keystore.jks",
|
||||
"_justification": "Key needed for android apk. Does not contain a particular secret"
|
||||
}
|
||||
]
|
||||
}
|
|
@ -15,7 +15,8 @@ jobs:
|
|||
displayName: '🧭 Run Credential Scanner'
|
||||
inputs:
|
||||
debugMode: false
|
||||
|
||||
SuppressionsPath: '.\\CredScanSuppressions.json'
|
||||
|
||||
- task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@3
|
||||
displayName: '🧭 Publish Guardian Artifacts - All Tools'
|
||||
inputs:
|
||||
|
|
Загрузка…
Ссылка в новой задаче