Restrict Code Analysis suppression?

Question

We have recently implemented the use of Code Analysis.

Is it possible to restrict users from suppressing Code Analysis results to In Source?

I only want suppressions to be stored in the suppression file (GlobalSuppressions.cs).

Our projects are hosted on TFS (on Visual Studio Online).

Answer 1

It's possible using a custom check-on policy. See how to create and implement it.

Answer 2

No it's not possible. If a team member can edit the file then he's free to add any code he likes, including the SuppressMessageAttribute.

Answer 3

You could create a custom code analysis rule to detect any SuppressMessageAttribute instances applied against anything other than the module or assembly.