Add CodeQL suppression for ContainerRegistryServerAPICalls (#1897)

anamnavi · web-flow · commit b85a9a891971 · 2025-10-16T13:06:34.000-04:00
diff --git a/src/code/ContainerRegistryServerAPICalls.cs b/src/code/ContainerRegistryServerAPICalls.cs
@@ -1014,6 +1014,7 @@ internal JObject GetHttpResponseJObjectUsingContentHeaders(string url, HttpMetho
                         return null;
                     }
 
+                    // codeql[cs/sensitive-data-transmission] This is expected PSResourceGet behavior to create the content of the request which is only transmitted to the server, not the user. This information is also not exposed back to the user via error or verbose messaging.
                     request.Content = new StringContent(content);
                     request.Content.Headers.Clear();
                     if (contentHeaders != null)

Original file line number	Diff line number	Diff line change
`@@ -1014,6 +1014,7 @@ internal JObject GetHttpResponseJObjectUsingContentHeaders(string url, HttpMetho`
`1014`	`1014`	`return null;`
`1015`	`1015`	`}`
`1016`	`1016`
	`1017`	`+ // codeql[cs/sensitive-data-transmission] This is expected PSResourceGet behavior to create the content of the request which is only transmitted to the server, not the user. This information is also not exposed back to the user via error or verbose messaging.`
`1017`	`1018`	`request.Content = new StringContent(content);`
`1018`	`1019`	`request.Content.Headers.Clear();`
`1019`	`1020`	`if (contentHeaders != null)`