Skip to content

Commit 29596e3

Browse files
authored
Point to central fake secret store (Azure#23064)
1 parent 20c4650 commit 29596e3

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

doc/dev/credscan_process.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,8 +48,10 @@ Credential warnings are suppressed in [eng/CredScanSuppression.json][suppression
4848
the `"placeholder"` list, and suppressed files are in the `"file"` list under `"suppressions"`.
4949

5050
If you have a fake credential flagged by CredScan, try one of the following (listed from most to least preferable):
51-
- Import and use a suitable credential from a file that's already suppressed in [eng/CredScanSuppression.json][suppression_file].
51+
- Import and use a suitable credential from our centralized fake secret store: [`devtools_testutils.fake_credentials`][fake_credentials].
52+
- Import and use a suitable credential from another file that's already suppressed in [eng/CredScanSuppression.json][suppression_file].
5253
- Replace the credential with a string value that's already suppressed in [eng/CredScanSuppression.json][suppression_file].
54+
- Move the credential into [devtools_testutils/fake_credentials.py][fake_credentials].
5355
- Move the credential into a `fake_credentials.py` file in your package, and add the file path to the list of suppressed files if necessary.
5456
- Add the credential to the list of suppressed string values.
5557

@@ -78,4 +80,5 @@ section of this guide.
7880
[credscan_doc]: https://aka.ms/credscan
7981
[credscan_output]: https://dev.azure.com/azure-sdk/internal/_build/results?buildId=1320151&view=logs&j=3b141548-98d7-5be1-7ef8-eeb08ca02972&t=41e0d8dc-42df-5fff-2417-80cd016cccdb
8082
[devops_doc]: https://dev.azure.com/azure-sdk/internal/_wiki/wikis/internal.wiki/413/Credential-Scan-Step-in-Pipeline
83+
[fake_credentials]: https://github.com/Azure/azure-sdk-for-python/blob/main/tools/azure-sdk-tools/devtools_testutils/fake_credentials.py
8184
[suppression_file]: https://github.com/Azure/azure-sdk-for-python/blob/main/eng/CredScanSuppression.json

0 commit comments

Comments
 (0)