Skip to content

Commit 3178334

Browse files
authored
Merge pull request #90372 from vharindra/changes1002
fix faq
2 parents 56905f1 + 6902142 commit 3178334

File tree

1 file changed

+3
-6
lines changed

1 file changed

+3
-6
lines changed

articles/security/develop/security-code-analysis-faq.md

Lines changed: 3 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -148,12 +148,6 @@ Examples of valid suppression rules:
148148
149149
#### What are recommended guidelines for managing secrets?
150150

151-
It's helpful to detect hard-coded secrets quickly and to mitigate the risks. But preventing secrets from getting checked in at all is even better.
152-
153-
To help in this regard, Microsoft has released an early preview of Credential Scanner Code Analyzer as part of the [Microsoft DevLabs extension](https://marketplace.visualstudio.com/items?itemName=VSIDEDevOpsMSFT.ContinuousDeliveryToolsforVisualStudio) for Visual Studio. The analyzer is an early-preview release. It gives developers an inline experience for detecting potential secrets in their code. By doing so, the analyzer also gives developers the chance to fix those issues in real time.
154-
155-
For more information, see the blog post [Managing Secrets Securely in the Cloud](https://devblogs.microsoft.com/visualstudio/managing-secrets-securely-in-the-cloud/).
156-
157151
The following resources help you securely manage secrets and access sensitive information from within your applications:
158152

159153
- [Azure Key Vault](../../key-vault/index.yml)
@@ -163,6 +157,9 @@ The following resources help you securely manage secrets and access sensitive in
163157
- [Managed identities in Azure App Service and Azure Functions](../../app-service/overview-managed-identity.md)
164158
- [AppAuthentication library](../../key-vault/service-to-service-authentication.md)
165159

160+
161+
For more information, see the blog post [Managing Secrets Securely in the Cloud](https://devblogs.microsoft.com/visualstudio/managing-secrets-securely-in-the-cloud/).
162+
166163
#### Can I write my own custom searchers?
167164

168165
Credential Scanner relies on a set of content searchers that are commonly defined in the buildsearchers.xml file. The file contains an array of XML serialized objects that represent a **ContentSearcher** object. The program is distributed with a set of well-tested searchers. But you can implement your own custom searchers too.

0 commit comments

Comments
 (0)