diff --git a/arm-ttk/testcases/deploymentTemplate/Password-params-must-be-secure.test.ps1 b/arm-ttk/testcases/deploymentTemplate/Password-params-must-be-secure.test.ps1 index 4364b844..16db6644 100644 --- a/arm-ttk/testcases/deploymentTemplate/Password-params-must-be-secure.test.ps1 +++ b/arm-ttk/testcases/deploymentTemplate/Password-params-must-be-secure.test.ps1 @@ -38,7 +38,7 @@ foreach ($parameter in $templateObject.parameters.psobject.properties) { $name -like "*accountkey*") { # if it's not secure, flag it - if ($type -ne 'securestring' -and $type -ne 'secureobject') { + if ($type -ne 'securestring' -and $type -ne 'secureobject' -and $type -ne 'bool') { #except certain patterns we know about in ARM # secret + Permissions (keyVault secret perms is an accessPolicy property) # secret + Version (url or simply the version property of a secret) diff --git a/unit-tests/Password-params-must-be-secure/Pass/no-password-params.json b/unit-tests/Password-params-must-be-secure/Pass/no-password-params.json index dc4f7554..2878c71d 100644 --- a/unit-tests/Password-params-must-be-secure/Pass/no-password-params.json +++ b/unit-tests/Password-params-must-be-secure/Pass/no-password-params.json @@ -4,7 +4,10 @@ "parameters": { "my_Parameter": { "type": "string" + }, + "secretToggle": { + "type": "bool" } }, "resources": [] -} \ No newline at end of file +}