Suppress CredScan false positive in PfxTests.cs

akoeplinger · web-flow · commit e2076191693d · 2025-04-30T06:47:42.000-04:00
diff --git a/src/libraries/System.Security.Cryptography/tests/X509Certificates/PfxTests.cs b/src/libraries/System.Security.Cryptography/tests/X509Certificates/PfxTests.cs
@@ -562,6 +562,7 @@ public static void ReadMLKem1024PrivateKey_Both_Pfx(X509KeyStorageFlags keyStora
         public static void ReadMLKem512PrivateKey_NotSupported(X509KeyStorageFlags keyStorageFlags)
         {
             const string PfxPassword = "PLACEHOLDER";
+            // [SuppressMessage("Microsoft.Security", "CSCAN-GENERAL0060", Justification="False positive, this is a certificate for unit testing.")]
             byte[] pfxBytes = Convert.FromBase64String(@"
                 MIIPbgIBAzCCDzQGCSqGSIb3DQEHAaCCDyUEgg8hMIIPHTCCDk8GCSqGSIb3DQEHBqCCDkAwgg48
                 AgEAMIIONQYJKoZIhvcNAQcBMBwGCiqGSIb3DQEMAQMwDgQIuOL/cp44/ycCAgfQgIIOCBb45pj6

Original file line number	Diff line number	Diff line change
`@@ -562,6 +562,7 @@ public static void ReadMLKem1024PrivateKey_Both_Pfx(X509KeyStorageFlags keyStora`
`562`	`562`	`public static void ReadMLKem512PrivateKey_NotSupported(X509KeyStorageFlags keyStorageFlags)`
`563`	`563`	`{`
`564`	`564`	`const string PfxPassword = "PLACEHOLDER";`
	`565`	`+ // [SuppressMessage("Microsoft.Security", "CSCAN-GENERAL0060", Justification="False positive, this is a certificate for unit testing.")]`
`565`	`566`	`byte[] pfxBytes = Convert.FromBase64String(@"`
`566`	`567`	`MIIPbgIBAzCCDzQGCSqGSIb3DQEHAaCCDyUEgg8hMIIPHTCCDk8GCSqGSIb3DQEHBqCCDkAwgg48`
`567`	`568`	`AgEAMIIONQYJKoZIhvcNAQcBMBwGCiqGSIb3DQEMAQMwDgQIuOL/cp44/ycCAgfQgIIOCBb45pj6`