Rollback CredScan to true and added CredScanSuppressions.json

Azure · Jun 12, 2023 · ecbf9b0 · ecbf9b0
1 parent e2f0960
commit ecbf9b0
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 1 deletion.
diff --git a/CredScanSuppressions.json b/CredScanSuppressions.json
@@ -0,0 +1,13 @@
+{
+    "tool": "Credential Scanner",
+    "suppressions": [
+        {
+            "file": "test_resources/deploy.sh",
+            "_justification": "Files contain fake credentials used by test code."
+        },
+        {
+            "file": "test_resources/test-resources.bicep",
+            "_justification": "Files contain fake credentials used by test code."
+        }
+    ]
+}
diff --git a/vsts/common/sdl_steps.yaml b/vsts/common/sdl_steps.yaml
@@ -16,7 +16,7 @@ steps:
     APIScan: false
     BinSkim: false
     CodesignValidation: false
-    CredScan: false
+    CredScan: true
     FortifySCA: false
     FxCop: false
     ModernCop: false