Add CodeQL suppressions for PowerShell intended behavior by anamnavi · Pull Request #25359 · PowerShell/PowerShell

Skip to content

Navigation Menu

Sign in

Appearance settings

Conversation

@anamnavi

PR Summary

This pull request includes several comments added to the code to address CodeQL warnings in the PowerShell codebase. The comments explain why the flagged issues are expected behavior and not security concerns.

Key changes include:

  • AddType.cs:

    • Added a comment to explain that allowing users to load any C# dependencies is integral to the purpose of the class and expected behavior.
  • WebRequestPSCmdlet.Common.cs:

    • Added a comment to clarify that PowerShell is an on-premise product, so information exposure through exceptions is not a security concern in the same way it would be for an ASP .NET service.
  • ExecutionContext.cs:

    • Added a comment to explain that loading DLLs during the initial state setup is expected behavior, allowing users to load additional C# types for specific scenarios.

PR Context

PR Checklist

TravisEz13

@TravisEz13

/azp run PowerShell-CI-linux-packaging, PowerShell-Windows-Packaging-CI

@azure-pipelines

Azure Pipelines could not run because the pipeline triggers exclude this branch/path.

auto-merge was automatically disabled

April 14, 2025 22:51

Head branch was pushed to by a user without write access

TravisEz13

@TravisEz13

/azp run PowerShell-CI-linux-packaging, PowerShell-Windows-Packaging-CI

@azure-pipelines

Azure Pipelines could not run because the pipeline triggers exclude this branch/path.

@microsoft-github-policy-service

pwshBot pushed a commit to pwshBot/PowerShell that referenced this pull request

Apr 17, 2025

pwshBot pushed a commit to pwshBot/PowerShell that referenced this pull request

Apr 17, 2025

@TravisEz13

@PowerShell/powershell-maintainers triage decision - required infrastructure change

Sysoiev-Yurii pushed a commit to Sysoiev-Yurii/PowerShell that referenced this pull request

May 12, 2025

SIRMARGIN pushed a commit to SIRMARGIN/PowerShell that referenced this pull request

Dec 12, 2025

Labels

2 participants

@anamnavi @TravisEz13