Linter rule should exclude all metadata (#17667)

## Description

Fixes #10308 

## Checklist

- [X] I have read and adhere to the [contribution
guide](https://github.com/Azure/bicep/blob/main/CONTRIBUTING.md).

###### Microsoft Reviewers: [Open in
CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com/Azure/bicep/pull/17667)

Author: guimatheus92

src/Bicep.Core.UnitTests/Diagnostics/LinterRuleTests/NoHardcodedEnvironmentUrlsRuleTests.cs

@@ -201,5 +201,35 @@ public void ExcludedHostsMatchingTest(string testString, bool isMatch)
                 }
             });
         }
+
+        [DataRow(0, @"
+        @description('Required. The full uri for the encrypt key from key vault. Example: https://<keyvaultname>.vault.azure.net/keys/<keyname>/<version>.')
+        param keyVaultUri string
+        ")]
+        [DataRow(0, @"
+        @sys.description('Required. The full uri for the encrypt key from key vault. Example: https://<keyvaultname>.vault.azure.net/keys/<keyname>/<version>.')
+        param keyVaultUri string
+        ")]
+        [DataRow(0, @"
+        @metadata({
+          description: 'Required. The full uri for the encrypt key from key vault. Example: https://<keyvaultname>.vault.azure.net/keys/<keyname>/<version>.'
+        })
+        param keyVaultUri string
+        ")]
+        [DataRow(0, @"
+        @metadata({
+          description: 'Required. The full uri for the encrypt key from key vault. Example: https://<keyvaultname>.vault.azure.net/keys/<keyname>/<version>.',
+          otherProperty: 'some other value'
+        })
+        param keyVaultUri string
+        ")]
+        [DataRow(1, @"
+        param keyVaultUri string = 'https://<keyvaultname>.vault.azure.net/keys/<keyname>/<version>'
+        ")]
+        [DataTestMethod]
+        public void ShouldSkipDescriptionAndMetadataDecorators(int diagnosticCount, string text)
+        {
+            AssertLinterRuleDiagnostics(NoHardcodedEnvironmentUrlsRule.Code, text, diagnosticCount, new Options(OnCompileErrors.Ignore));
+        }
     }
 }

src/Bicep.Core/Analyzers/Linter/Rules/NoHardcodedEnvironmentUrlsRule.cs

@@ -4,9 +4,12 @@
 using System.Collections.Immutable;
 using Bicep.Core.Diagnostics;
 using Bicep.Core.Semantics;
+using Bicep.Core.Semantics.Namespaces;
 using Bicep.Core.SourceGraph;
 using Bicep.Core.Syntax;
 using Bicep.Core.Text;
+using Bicep.Core.TypeSystem;
+using Bicep.Core.TypeSystem.Types;
 
 namespace Bicep.Core.Analyzers.Linter.Rules
 {
@@ -41,7 +44,7 @@ public override IEnumerable<IDiagnostic> AnalyzeInternal(SemanticModel model, Di
 
             if (disallowedHosts.Any())
             {
-                var visitor = new Visitor(disallowedHosts, disallowedHosts.Min(h => h.Length), excludedHosts);
+                var visitor = new Visitor(disallowedHosts, disallowedHosts.Min(h => h.Length), excludedHosts, model);
                 visitor.Visit(model.SourceFile.ProgramSyntax);
 
                 return visitor.DisallowedHostSpans.Select(entry => CreateDiagnosticForSpan(diagnosticLevel, entry.Key, entry.Value));
@@ -102,12 +105,14 @@ private sealed class Visitor : AstVisitor
             private readonly ImmutableArray<string> disallowedHosts;
             private readonly int minHostLen;
             private readonly ImmutableArray<string> excludedHosts;
+            private readonly SemanticModel model;
 
-            public Visitor(ImmutableArray<string> disallowedHosts, int minHostLen, ImmutableArray<string> excludedHosts)
+            public Visitor(ImmutableArray<string> disallowedHosts, int minHostLen, ImmutableArray<string> excludedHosts, SemanticModel model)
             {
                 this.disallowedHosts = disallowedHosts;
                 this.minHostLen = minHostLen;
                 this.excludedHosts = excludedHosts;
+                this.model = model;
             }
 
             public static IEnumerable<(TextSpan RelativeSpan, string Value)> RemoveOverlapping(IEnumerable<(TextSpan RelativeSpan, string Value)> matches)
@@ -126,8 +131,24 @@ public Visitor(ImmutableArray<string> disallowedHosts, int minHostLen, Immutable
                 }
             }
 
+            public override void VisitDecoratorSyntax(DecoratorSyntax syntax)
+            {
+                // Skip @description and @metadata decorators entirely
+                if (model.GetSymbolInfo(syntax.Expression) is FunctionSymbol functionSymbol &&
+                    functionSymbol.DeclaringObject is NamespaceType namespaceType &&
+                    LanguageConstants.IdentifierComparer.Equals(namespaceType.ExtensionName, SystemNamespaceType.BuiltInName) &&
+                    (LanguageConstants.IdentifierComparer.Equals(functionSymbol.Name, LanguageConstants.MetadataDescriptionPropertyName) ||
+                     LanguageConstants.IdentifierComparer.Equals(functionSymbol.Name, LanguageConstants.ParameterMetadataPropertyName)))
+                {
+                    return;
+                }
+
+                base.VisitDecoratorSyntax(syntax);
+            }
+
             public override void VisitStringSyntax(StringSyntax syntax)
             {
+
                 // shortcut check by testing length of full span
                 if (syntax.Span.Length > minHostLen)
                 {
@@ -181,6 +202,12 @@ public override void VisitModuleDeclarationSyntax(ModuleDeclarationSyntax syntax
                 this.VisitNodes(syntax.LeadingNodes);
                 this.Visit(syntax.Value);
             }
+
+            public override void VisitMetadataDeclarationSyntax(MetadataDeclarationSyntax syntax)
+            {
+                // Skip metadata declarations entirely - URLs in metadata should be allowed
+                return;
+            }
         }
     }
 }