Skip to content

Conversation

krwq
Copy link
Member

@krwq krwq commented Oct 3, 2025

Updated expiration dates for baseline results - those should still be suppressed in order for BinSkim to not complain. We do not have control over external components.

Updated expiration dates for baseline results.
@Copilot Copilot AI review requested due to automatic review settings October 3, 2025 10:42
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Extends baseline suppression expiration dates to keep existing analyzer findings suppressed for longer.

  • Updated multiple expirationDate values to 2026-12-31T23:59:59Z
  • Did not update corresponding justification text still referencing a 180-day window
  • Introduced a different timestamp format (added 'T') only for expirationDate fields

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Comment on lines +27 to 28
"expirationDate": "2026-12-31T23:59:59Z",
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-06 23:30:43Z"
Copy link
Preview

Copilot AI Oct 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The justification text states a 180-day expiration from 2024-03-06, which would place expiration in 2024, but the updated expirationDate is 2026-12-31. Update the justification to reflect the new long-term date or adjust the expirationDate to match the stated 180-day policy.

Copilot uses AI. Check for mistakes.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@krwq should we update this too? Another option would be to copy the file from an internal PR which we dismiss. I think that's how we created this to begin with.

"createdDate": "2024-03-06 21:08:31Z",
"expirationDate": "2024-08-23 23:30:43Z",
"expirationDate": "2026-12-31T23:59:59Z",
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-06 23:30:43Z"
Copy link
Preview

Copilot AI Oct 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The justification text states a 180-day expiration from 2024-03-06, which would place expiration in 2024, but the updated expirationDate is 2026-12-31. Update the justification to reflect the new long-term date or adjust the expirationDate to match the stated 180-day policy.

Copilot uses AI. Check for mistakes.

"createdDate": "2024-03-06 21:08:31Z",
"expirationDate": "2024-08-23 23:30:43Z",
"expirationDate": "2026-12-31T23:59:59Z",
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-06 23:30:43Z"
Copy link
Preview

Copilot AI Oct 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The justification text states a 180-day expiration from 2024-03-06, which would place expiration in 2024, but the updated expirationDate is 2026-12-31. Update the justification to reflect the new long-term date or adjust the expirationDate to match the stated 180-day policy.

Copilot uses AI. Check for mistakes.

"createdDate": "2024-03-06 21:13:53Z",
"expirationDate": "2024-08-23 23:30:43Z",
"expirationDate": "2026-12-31T23:59:59Z",
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-06 23:30:43Z"
Copy link
Preview

Copilot AI Oct 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The justification text states a 180-day expiration from 2024-03-06, which would place expiration in 2024, but the updated expirationDate is 2026-12-31. Update the justification to reflect the new long-term date or adjust the expirationDate to match the stated 180-day policy.

Copilot uses AI. Check for mistakes.

"createdDate": "2024-03-06 21:36:33Z",
"expirationDate": "2024-08-23 23:30:43Z",
"expirationDate": "2026-12-31T23:59:59Z",
"justification": "This error is baselined with an expiration date of 180 days from 2024-03-06 23:30:43Z"
Copy link
Preview

Copilot AI Oct 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The justification text states a 180-day expiration from 2024-03-06, which would place expiration in 2024, but the updated expirationDate is 2026-12-31. Update the justification to reflect the new long-term date or adjust the expirationDate to match the stated 180-day policy.

Copilot uses AI. Check for mistakes.

Comment on lines 26 to +27
"createdDate": "2024-03-06 21:08:31Z",
"expirationDate": "2024-08-23 23:30:43Z",
"expirationDate": "2026-12-31T23:59:59Z",
Copy link
Preview

Copilot AI Oct 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Timestamp formats are inconsistent: createdDate uses a space (YYYY-MM-DD HH:MM:SSZ) while expirationDate uses ISO 8601 with 'T'. Standardize on one format (prefer full ISO 8601 or existing project convention) to avoid parsing or readability issues. Apply consistently to all updated expirationDate entries.

Copilot uses AI. Check for mistakes.

Copy link

codecov bot commented Oct 3, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.01%. Comparing base (439a052) to head (893557b).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #7518      +/-   ##
==========================================
- Coverage   69.03%   69.01%   -0.02%     
==========================================
  Files        1482     1482              
  Lines      274092   274092              
  Branches    28266    28266              
==========================================
- Hits       189216   189175      -41     
- Misses      77491    77530      +39     
- Partials     7385     7387       +2     
Flag Coverage Δ
Debug 69.01% <ø> (-0.02%) ⬇️
production 63.30% <ø> (-0.02%) ⬇️
test 89.46% <ø> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 6 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

"default"
],
"tool": "psscriptanalyzer",
"ruleId": "PSAvoidUsingUsernameAndPasswordParams",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We do not have control over external components.

We do have control over eng/common/SetupNugetSources.ps1 that's from arcade. Maybe we should delete this one?

"memberOf": [
"default"
],
"tool": "binskim",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These for MKLImports are effectively an external component the way it's built today. This is a custom build of intel MKL where we cannot modify much of the pipeline. I have discussed building this in our pipeline -- we were blocked on this in the past due to the size of the toolset used to produce it -- but there may be options to build from nuget packages containing the MKL libs. Even so, we wouldn't be able to apply any compiler flags since we just link libraries provided by Intel.

We also have other components we redistribute but don't build ourselves

  • OneDAL (we build OneDalNative, but many Intel onedal binaries are redistributed with it)
  • libiomp (dependency of MKL)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants