From b92f1d9972389b3bc1cc7c9ed87aa4139bc93a55 Mon Sep 17 00:00:00 2001
From: Anam Navied <annavied@microsoft.com>
Date: Thu, 16 Oct 2025 13:03:05 -0400
Subject: [PATCH] Add CodeQL suppression for ContainerRegistryServerAPICalls

---
 src/code/ContainerRegistryServerAPICalls.cs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/code/ContainerRegistryServerAPICalls.cs b/src/code/ContainerRegistryServerAPICalls.cs
index 2c39f536d..d828c543d 100644
--- a/src/code/ContainerRegistryServerAPICalls.cs
+++ b/src/code/ContainerRegistryServerAPICalls.cs
@@ -1014,6 +1014,7 @@ internal JObject GetHttpResponseJObjectUsingContentHeaders(string url, HttpMetho
                         return null;
                     }
 
+                    // codeql[cs/sensitive-data-transmission] This is expected PSResourceGet behavior to create the content of the request which is only transmitted to the server, not the user. This information is also not exposed back to the user via error or verbose messaging.
                     request.Content = new StringContent(content);
                     request.Content.Headers.Clear();
                     if (contentHeaders != null)