-
Notifications
You must be signed in to change notification settings - Fork 36
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Pipelines fixes. (Credscan suppression file, CodeQL, AndroidAuthClien…
…tVariables) (#2382) 1. Credscan suppression file In order to be compliant with EO we move the production pipelines to 1ES Pipeline Templates, this templates auto-inject some sdl tasks like credscan, that scan all the repos used. In this case credscan found a couple of 'vulnerabilities' that blocks the pipeline, in order to ignore these false alarms, we need to include this file. 2. CodeQL Semmle guardian task unexpected stop working. Probably because this task is on deprecation path. https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/troubleshooting/onboarding/guardian For this reason, we move to CodeQL3000 3. Stop using AndroidAuthClientVariables and use AndroidAuthClientAutomationSecrets instead The service connection for this group variable was deactivated, instead of activating it, I decided to remove it since it has low usage, and decided to move the only valid secret to another group variable.
- Loading branch information
Showing
4 changed files
with
73 additions
and
64 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,41 @@ | ||
| { | ||
| "tool": "Credential Scanner", | ||
| "suppressions": [ | ||
| { | ||
| "file": "common/src/main/res/values-da/strings.xml", | ||
| "_justification": "Password string for dialog box" | ||
| }, | ||
| { | ||
| "file": "common/src/main/res/values-de/strings.xml", | ||
| "_justification": "Password string for dialog box" | ||
| }, | ||
| { | ||
| "file": "common/src/main/res/values-et/strings.xml", | ||
| "_justification": "Password string for dialog box" | ||
| }, | ||
| { | ||
| "file": "common/src/main/res/values-eu/strings.xml", | ||
| "_justification": "Password string for dialog box" | ||
| }, | ||
| { | ||
| "file": "common/src/main/res/values-nb/strings.xml", | ||
| "_justification": "Password string for dialog box" | ||
| }, | ||
| { | ||
| "file": "common/src/main/res/values-nl/strings.xml", | ||
| "_justification": "Password string for dialog box" | ||
| }, | ||
| { | ||
| "file": "common4j/src/test/com/microsoft/identity/common/java/platform/JweResponseTests.java", | ||
| "_justification": "Mock data for test case" | ||
| }, | ||
| { | ||
| "file": "common4j/src/test/com/microsoft/identity/common/java/crypto/SP800108KeyGenTests.java", | ||
| "_justification": "Mock data for test case" | ||
| }, | ||
| { | ||
| "file": "common4j/src/test/com/microsoft/identity/common/java/crypto/SP800108KeyGenTests.java", | ||
| "_justification": "Mock data for test case" | ||
| } | ||
| ] | ||
| } |