Create Guardian suppression file (#6394)

donnie-msft · web-flow · commit 1466fd7767c9 · 2025-04-15T12:45:24.000-07:00
diff --git a/.gdn/.gdnsuppress b/.gdn/.gdnsuppress
@@ -0,0 +1,35 @@
+{
+    "version": "latest",
+    "suppressionSets": {
+      "default": {
+        "name": "default",
+        "createdDate": "2025-04-14T13:30:47Z",
+        "lastUpdatedDate": "2025-04-14T13:30:47Z"
+      }
+    },
+    "results": {
+      "94b262a20d21544c9527803ee2109eec43f13edee79db6408106a7bf15ffaa0b": {
+        "signature": "94b262a20d21544c9527803ee2109eec43f13edee79db6408106a7bf15ffaa0b",
+        "target": "artifacts/NuGet.VisualStudio.Implementation/bin/release/net472/Microsoft.VisualStudio.ManagedInterfaces.dll",
+        "memberOf": ["default"],
+        "tool": "BinSkim",
+        "ruleId": "BA2009",
+        "justification": "This DLL is not shipped and is not built by our team.",
+        "createdDate": "2025-04-15 17:38:54Z",
+        "expirationDate": null,
+        "type": null
+      },
+      "dadf10d994d221e4d43842f89921d1eca4a2185ef8afa6c6894e5a8faf96afc6": {
+        "signature": "dadf10d994d221e4d43842f89921d1eca4a2185ef8afa6c6894e5a8faf96afc6",
+        "target": "artifacts/NuGet.VisualStudio.Implementation/bin/release/net472/Microsoft.VisualStudio.ManagedInterfaces.dll",
+        "memberOf": ["default"],
+        "tool": "BinSkim",
+        "ruleId": "BA2016",
+        "justification": "This DLL is not shipped and is not built by our team.",
+        "createdDate": "2025-04-15 17:38:54Z",
+        "expirationDate": null,
+        "type": null
+      }
+    }
+  }
+  
diff --git a/eng/pipelines/official.yml b/eng/pipelines/official.yml
@@ -71,6 +71,8 @@ extends:
         enabled: true
       credscan:
         enabled: false
+      suppression:
+        suppressionFile: $(Build.SourcesDirectory)\.gdn\.gdnsuppress
     pool:
       name: AzurePipelines-EO
       image: 1ESPT-Windows2022
diff --git a/eng/pipelines/pull_request.yml b/eng/pipelines/pull_request.yml
@@ -75,6 +75,8 @@ extends:
         enabled: true
       credscan:
         enabled: false
+      suppression:
+        suppressionFile: $(Build.SourcesDirectory)\.gdn\.gdnsuppress
     pool:
       name: AzurePipelines-EO
       image: 1ESPT-Windows2022
