File tree Expand file tree Collapse file tree 1 file changed +4
-1
lines changed Expand file tree Collapse file tree 1 file changed +4
-1
lines changed Original file line number Diff line number Diff line change @@ -48,8 +48,10 @@ Credential warnings are suppressed in [eng/CredScanSuppression.json][suppression
48
48
the ` "placeholder" ` list, and suppressed files are in the ` "file" ` list under ` "suppressions" ` .
49
49
50
50
If you have a fake credential flagged by CredScan, try one of the following (listed from most to least preferable):
51
- - Import and use a suitable credential from a file that's already suppressed in [ eng/CredScanSuppression.json] [ suppression_file ] .
51
+ - Import and use a suitable credential from our centralized fake secret store: [ ` devtools_testutils.fake_credentials ` ] [ fake_credentials ] .
52
+ - Import and use a suitable credential from another file that's already suppressed in [ eng/CredScanSuppression.json] [ suppression_file ] .
52
53
- Replace the credential with a string value that's already suppressed in [ eng/CredScanSuppression.json] [ suppression_file ] .
54
+ - Move the credential into [ devtools_testutils/fake_credentials.py] [ fake_credentials ] .
53
55
- Move the credential into a ` fake_credentials.py ` file in your package, and add the file path to the list of suppressed files if necessary.
54
56
- Add the credential to the list of suppressed string values.
55
57
@@ -78,4 +80,5 @@ section of this guide.
78
80
[ credscan_doc ] : https://aka.ms/credscan
79
81
[ credscan_output ] : https://dev.azure.com/azure-sdk/internal/_build/results?buildId=1320151&view=logs&j=3b141548-98d7-5be1-7ef8-eeb08ca02972&t=41e0d8dc-42df-5fff-2417-80cd016cccdb
80
82
[ devops_doc ] : https://dev.azure.com/azure-sdk/internal/_wiki/wikis/internal.wiki/413/Credential-Scan-Step-in-Pipeline
83
+ [ fake_credentials ] : https://github.com/Azure/azure-sdk-for-python/blob/main/tools/azure-sdk-tools/devtools_testutils/fake_credentials.py
81
84
[ suppression_file ] : https://github.com/Azure/azure-sdk-for-python/blob/main/eng/CredScanSuppression.json
You can’t perform that action at this time.
0 commit comments