-
Notifications
You must be signed in to change notification settings - Fork 522
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
GeoPolitical Update: Fix for GeoPolExclude into master branch #565
Conversation
<ExcludeFolder>src\Microsoft.Health.Fhir.R4.Core\Features\Conformance\AllCapabilities.json</ExcludeFolder> | ||
<ExcludeFolder>src\Microsoft.Health.Fhir.R4.Core\Features\Conformance\DefaultCapabilities.json</ExcludeFolder> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If we're excluding the R4 DefaultCapabilities.json
, should we also exclude the STU3 DefaultCapabilities.json
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I really don't know @brandonpollett where these files are used and whether they should be scanned for GeoPolitical issues or not. If in doubt about whether a file should be included, best to include. If it is an external file that we cannot change, then we should exclude from a scan as it would create un-fixable noise issues otherwise. Remember wildcards are supported e.g. *.json
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These files are used to generate our metadata endpoint that is exposed to the customers. Some of it can probably be changed and some of it can't. Ultimately it just needs to conform to the spec (details here: https://www.hl7.org/fhir/capabilitystatement.html). I guess another question to ask, is why was the STU3 default capabilities added to the exclude list?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That file threw up some GeoPolitical issues @brandonpollett which @jackliums investigated and figured that we should exclude from future scans.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Happy for us to exclude on an as-needed basis
Description
Suggestion for excluding file from Geo Political which concerns some flags at present.
Note @jackliums that we can use wildcards if we want to exclude multiple files e.g. *.json