Make credscan run clean (dotnet#4876)

* suppressions * more * typo
radical · Jul 12, 2024 · 681f2e7 · 681f2e7
1 parent a133411
commit 681f2e7
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.config/CredScanSuppressions.json b/.config/CredScanSuppressions.json
@@ -24,6 +24,14 @@
     {
       "placeholder": "thisIsAFakeSecret",
       "_justification": "This isn't a real secret, it's used in one of the playground applications for testing purposes."
+    },
+    {
+      "file": "\\tests\\Shared\\TestCertificates\\eku.client.pfx",
+      "_justification": "Legitimate UT certificate file with private key, from dotnet/aspnetcore"
+    },
+    {
+      "file": "\\tests\\Shared\\TestCertificates\\testCert.pfx",
+      "_justification": "Legitimate UT certificate file with private key, from dotnet/aspnetcore"
     }
   ]
 }
diff --git a/tests/Shared/TestCertificates/README.md b/tests/Shared/TestCertificates/README.md
@@ -3,3 +3,7 @@
 Unless otherwise stated, these certificates are copied from dotnet/aspnetcore:
 
 https://github.com/dotnet/aspnetcore/tree/main/src/Shared/TestCertificates
+
+If you add more, please also copy the suppression entries from this file in dotnet/aspnetcore:
+
+.config\CredScanSuppressions.json