Add security scan suppression (Azure#600)

Add suppresssion for private key password in ca-certs.ps1
Federico-Figalli · Dec 3, 2018 · 86de05e · 86de05e
1 parent 93be534
commit 86de05e
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.config/CredScanSuppressions.json b/.config/CredScanSuppressions.json
@@ -20,6 +20,10 @@
     {
       "hash": "uG0/Q6Fbxsdsr+4y8KxokL47oYyQAdBBEYCWKNNIMGQ=",
       "_justification": "This is a username and not a credential (edge-hub/test/Microsoft.Azure.Devices.Edge.Hub.Mqtt.Test/IdentityTest.cs)"
+    },
+    {
+      "placeholder": "1234",
+      "_justification": "This private key password (defined in /tools/CACertificates/ca-certs.ps1 and /tools/CACertificates/certGen.sh) is intended only to help demonstrate and prototype CA certs and warnings are provided to not use in production."
     }
   ]
 }