CredScanSuppressions.json

{
  "tool": "Credential Scanner",
  "suppressions": [
    {
      "placeholder": "r7rpDQLwRhJQF/WoSPp6sMKJB9GQJCsZ9/o8xkqP/xM=",
      "_justification": "secret filed used among recoding yaml file of aks"
    },
    {
      "placeholder": "1w4F14PX8TKt7rMaG1bymhJlfjab4cocxoL7edC9zJI=",
      "_justification": "secret filed used among recoding yaml file of acr"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\appconfig\\tests\\latest\\recordings\\test_azconfig_credential.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\appconfig\\tests\\latest\\recordings\\test_azconfig_feature.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\appconfig\\tests\\latest\\recordings\\test_azconfig_feature_filter.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\appconfig\\tests\\latest\\recordings\\test_azconfig_import_export_naming_conventions.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\appconfig\\tests\\latest\\recordings\\test_azconfig_import_export.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\appconfig\\tests\\latest\\recordings\\test_azconfig_kv.yaml"
      ],
      "_justification": "[AppConfig] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\appservice\\tests\\latest\\recordings\\test_webapp_hybridconnectionE2E.yaml"
      ],
      "_justification": "[AppService] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\cosmosdb\\tests\\latest\\recordings\\test_cosmosdb_database.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\cosmosdb\\tests\\latest\\recordings\\test_cosmosdb_collection.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\cosmosdb\\tests\\latest\\recordings\\test_keys_database_account.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\cosmosdb\\tests\\latest\\recordings\\test_list_databases.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\cosmosdb\\tests\\latest\\recordings\\test_update_database_account.yaml"
      ],
      "_justification": "[CosmosDB] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\ams\\tests\\latest\\recordings\\test_ams_streaming_endpoint.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\ams\\tests\\latest\\recordings\\test_content_key_policy_create_with_playready.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\ams\\tests\\latest\\recordings\\test_content_key_policy_delete.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\ams\\tests\\latest\\recordings\\test_content_key_policy_list.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\ams\\tests\\latest\\recordings\\test_live_event_start_show.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\ams\\tests\\latest\\recordings\\test_ams_streaming_endpoint_start_stop.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\ams\\tests\\latest\\recordings\\test_ams_sp_create.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\ams\\tests\\latest\\recordings\\test_content_key_policy_create_simple.yaml"
      ],
      "_justification": "[AMS] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\hdinsight\\tests\\latest\\recordings\\test_hdinsight_monitor.yaml"
      ],
      "_justification": "[HDInsight] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\redis\\tests\\latest\\recordings\\test_redis_cache.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\redis\\tests\\latest\\recordings\\test_redis_cache_list_firewall_and_server_link_works.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\redis\\tests\\latest\\recordings\\test_redis_cache_list_keys.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\redis\\tests\\latest\\recordings\\test_redis_cache_patch_schedule.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\redis\\tests\\latest\\recordings\\test_redis_cache_with_mandatory_args.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\redis\\tests\\latest\\recordings\\test_redis_cache_with_tags_and_zones.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\redis\\tests\\latest\\recordings\\test_redis_cache_with_tlsversion_and_settings.yaml"
      ],
      "_justification": "[Redis] one-off access key recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\iot\\tests\\latest\\recordings\\test_iot_hub.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\iot\\tests\\latest\\recordings\\test_iot_pnp.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\iot\\tests\\latest\\recordings\\test_dps_lifecycle.yaml"
      ],
      "_justification": "[IoT] response body contains random value recognized as secret"
    },
    {
      "placeholder": "+XLy+MVZ+aTeOnVzN2kLeB16O+kSxmz6g3rS6fAf6rw=",
      "_justification": "[IoT] hard code access key"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\servicebus\\tests\\latest\\recordings\\test_sb_alias.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\servicebus\\tests\\latest\\recordings\\test_sb_namespace.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\servicebus\\tests\\latest\\recordings\\test_sb_queue.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\servicebus\\tests\\latest\\recordings\\test_sb_topic.yaml"
      ],
      "_justification": "[ServiceBus] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\vm\\tests\\hybrid_2018_03_01\\recordings\\test_vm_create_existing_ids_options.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\vm\\tests\\hybrid_2018_03_01\\recordings\\test_diagnostics_extension_install.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\vm\\tests\\hybrid_2018_03_01\\recordings\\test_vm_create_existing_options.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\vm\\tests\\hybrid_2019_03_01\\recordings\\test_vm_managed_disk.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\vm\\tests\\hybrid_2018_03_01\\recordings\\test_vm_boot_diagnostics.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\vm\\tests\\latest\\recordings\\test_vm_large_disk.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\vm\\tests\\latest\\recordings\\test_vm_managed_disk.yaml"
      ],
      "_justification": "[VM] response body contains random value recognized as secret in outdated recoding files of vm may remove in the future, and one-off password"
    },
    {
      "placeholder": "testPassword0",
      "_justification": "[VM] one-off password for vm creation"
    },
    {
      "placeholder": "@PasswordPassword1!",
      "_justification": "[VM] one-off password for vm creation"
    },
    {
      "placeholder": "verySecret123",
      "_justification": "[VM] one-off password for vm creation"
    },
    {
      "placeholder": "verySecret!!!",
      "_justification": "[VM] one-off password for test_vm_defaults.py"
    },
    {
      "placeholder": "admin123",
      "_justification": "[VM] admin user name for test_vm_defaults.py"
    },
    {
      "placeholder": "testpassword",
      "_justification": "[DMS] one-off password in test"
    },
    {
      "placeholder": "verySecret1",
      "_justification": "[WebApp] one-off password in test"
    },
    {
      "placeholder": "UserInput012345",
      "_justification": "[Backup] one-off password in test"
    },
    {
      "placeholder": "Password1!",
      "_justification": "[HDInsight]"
    },
    {
      "placeholder": "SecretPassword123",
      "_justification": "[lab]/[rdbms] one-off password in test"
    },
    {
      "placeholder": "pass1234",
      "_justification": "[KeyVault] one-off password in test"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2019_03_01\\recordings\\test_renew_account_key.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_storage_queue_general_scenario.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_storage_share_acl_scenarios.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_storage_table_main_scenario.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_storage_blob_incremental_copy.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_storage_blob_lease_operations.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_storage_blob_socket_timeout.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_storage_container_acl_scenarios.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_storage_file_copy_scenario.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_create_account_sas.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_create_storage_account.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_renew_account_key.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_list_storage_accounts.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_storage_blob_metadata_operations.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\recordings\\test_storage_blob_snapshot_operations.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2019_03_01\\test_storage_url_helpers.py",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\hybrid_2018_03_01\\test_storage_url_helpers.py",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\latest\\test_storage_url_helpers.py",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\latest\\recordings\\test_renew_account_key.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\storage\\tests\\latest\\recordings\\test_renew_account_kerb_key.yaml"
      ],
      "_justification": "[Storage] response body contains random value recognized as secret in outdated recoding files of storage may remove in the future"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\relay\\tests\\latest\\recordings\\test_relay_hyco.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\relay\\tests\\latest\\recordings\\test_relay_namespace.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\relay\\tests\\latest\\recordings\\test_relay_wcfrelay.yaml"
      ],
      "_justification": "[Relay] one-off key value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\batch\\tests\\latest\\recordings\\test_batch_general_arm_cmd.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\batch\\tests\\latest\\recordings\\test_batch_account_cmd.yaml"
      ],
      "_justification": "[Batch] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\eventgrid\\tests\\latest\\recordings\\test_create_domain.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\eventgrid\\tests\\latest\\recordings\\test_create_topic.yaml"
      ],
      "_justification": "[EventGrid] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\eventhubs\\tests\\latest\\recordings\\test_eh_eventhub.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\eventhubs\\tests\\latest\\recordings\\test_eh_namespace.yaml"
      ],
      "_justification": "[EventHub] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\latest\\recordings\\test_keyvault_storage_account.yaml"
      ],
      "_justification": "[KeyVault] response body contains random value recognized as secret"
    },
    {
      "file": "src\\azure-cli\\azure\\cli\\command_modules\\botservice\\tests\\latest\\recordings\\test_prepare_publish_should_raise_cli_error_for_v4_bots.yaml",
      "_justification": "[botservice] response body contains random value recognized as secret"
    },
    {
      "file": "src\\azure-cli\\azure\\cli\\command_modules\\dla\\tests\\latest\\recordings\\test_adla_account_mgmt.yaml",
      "_justification": "[dla] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\sql\\tests\\latest\\recordings\\test_sql_db_import_export_mgmt.yaml",
        "src\\azure-cli\\azure\\cli\\command_modules\\sql\\tests\\latest\\test_sql_commands.py",
        "src\\azure-cli\\azure\\cli\\command_modules\\sqlvm\\tests\\latest\\test_sqlvm_commands.py"
      ],
      "_justification": "[SQL] one-off password used for test"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\monitor\\tests\\latest\\recordings\\test_monitor_log_analytics_workspace_default.yaml"
      ],
      "_justification": "[Monitor] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\network\\tests\\latest\\recordings\\test_network_watcher.yaml"
      ],
      "_justification": "[Network] response body contains random value recognized as secret"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\signalr\\tests\\latest\\recordings\\test_signalr_commands.yaml"
      ],
      "_justification": "[SingalR] response body contains random value recognized as secret"
    },
    {
      "placeholder": "registry_password",
      "_justification": "false alarm in src\\azure-cli\\azure\\cli\\command_modules\\container\\custom.py"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\network\\tests\\hybrid_2018_03_01\\AuthCert.pfx",
        "src\\azure-cli\\azure\\cli\\command_modules\\network\\tests\\hybrid_2018_03_01\\AuthCert2.pfx",
        "src\\azure-cli\\azure\\cli\\command_modules\\network\\tests\\hybrid_2018_03_01\\TestCert.pfx",
        "src\\azure-cli\\azure\\cli\\command_modules\\network\\tests\\hybrid_2018_03_01\\TestCert2.pfx",
        "src\\azure-cli\\azure\\cli\\command_modules\\network\\tests\\latest\\AuthCert.pfx",
        "src\\azure-cli\\azure\\cli\\command_modules\\network\\tests\\latest\\AuthCert2.pfx",
        "src\\azure-cli\\azure\\cli\\command_modules\\network\\tests\\latest\\TestCert.pfx",
        "src\\azure-cli\\azure\\cli\\command_modules\\network\\tests\\latest\\TestCert2.pfx"
      ],
      "_justification": "[Network] Test certs"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\hybrid_2018_03_01\\ec256.pem",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\hybrid_2018_03_01\\ec521pw.pem",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\hybrid_2018_03_01\\import_pem_plain.pem",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\hybrid_2018_03_01\\import_pfx.pfx",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\hybrid_2018_03_01\\mydomain.test.encrypted.pem",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\hybrid_2018_03_01\\mydomain.test.pem",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\latest\\ec256.pem",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\latest\\mydomain.test.pem",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\latest\\mydomain.test.encrypted.pem",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\latest\\import_pfx.pfx",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\latest\\import_pem_plain.pem",
        "src\\azure-cli\\azure\\cli\\command_modules\\keyvault\\tests\\latest\\ec521pw.pem"
      ],
      "_justification": "[KeyVault] Test certs"
    },
    {
      "file": "src\\azure-cli\\azure\\cli\\command_modules\\ams\\tests\\latest\\data\\TestCert2.pfx",
      "_justification": "[AMS] Test certs"
    },
    {
      "file": "src\\azure-cli\\azure\\cli\\command_modules\\appservice\\tests\\latest\\server.pfx",
      "_justification": "[AppService] Test certs"
    },
    {
      "file": "src\\azure-cli-core\\azure\\cli\\core\\tests\\sp_cert.pem",
      "_justification": "[Core] Test certs"
    },
    {
      "placeholder": "0abf356884d74b4aacbd7b1ebd3da0f7",
      "_justification": "[AMS] hard code accessToken in test_ams_live_event_scenarios.py"
    },
    {
      "placeholder": "Docker!",
      "_justification": "[AppService] hard code password in custom.py of service which must be took down in the future"
    },
    {
      "placeholder": "5+36OCtbIwfy8g5glC4bQQrFsfmMc3iD",
      "_justification": "[Container] hard code password in test_container_commands.py"
    },
    {
      "file": [
        "src\\azure-cli\\azure\\cli\\command_modules\\batchai\\tests\\latest\\data\\auto_scale_cluster_with_azure_files.json",
        "src\\azure-cli\\azure\\cli\\command_modules\\batchai\\tests\\latest\\data\\cluster_with_azure_files.json",
        "src\\azure-cli\\azure\\cli\\command_modules\\batchai\\tests\\latest\\data\\file_server.json",
        "src\\azure-cli\\azure\\cli\\command_modules\\batch\\tests\\latest\\data\\batch-pool-create.json"
      ],
      "_justification": "unclear file contains password, need to remove in the future"
    }
  ]
}