Azure / Azure/Azure-Verified-Modules

AzAdvertizer data changes detected

Open
#2,521 1 comment 0 reactions 0 assignees View on GitHub
Needs: Triage :mag:
Dominant language
PowerShell
Stars
580
Forks
161
Avg merge
11h 3m
Merged PRs (30d)
15

Description

Azure Advertizer Data Diff Report

Resource Type: microsoft.containerregistry/registries-repositories-images
--------------------------------------------------
New Advisor Recommendations:
- [Container images in Azure registry should not include compromised packages](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/06303eb4-0561-4840-a1b6-733f9c48b357)

Resource Type: microsoft.containerservice/managedclusters-namespaces-deployments-replicasets-pods-containers
--------------------------------------------------
New Advisor Recommendations:
- [Containers running in Azure should not include compromised packages](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/2b423349-9dfd-427d-9868-5d3b926b64bf)

Resource Type: microsoft.machinelearningservices/workspaces
--------------------------------------------------
New Advisor Recommendations:
- [Upgrade to Azure Machine Learning SDK v2](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/6effe055-73b3-4dd2-bcbf-bbdcd11b4161)
- [Migrate to dedicated virtual machine for compute clusters](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/38b0a494-d5f6-4855-83e4-4e5f5ed9b987)

Resource Type: microsoft.network/azurefirewalls
--------------------------------------------------
New APRL Recommendations:
- [Monitor "AZFW Latency Probe" metric](https://azure.github.io/Azure-Proactive-Resiliency-Library-v2/azure-resources/Network/azureFirewalls/#monitor-azfw-latency-probe-metric)

Resource Type: microsoft.security/awsresource
--------------------------------------------------
New Advisor Recommendations:
- [Avoid the use of the "root" account](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/a47a6c3b-0629-406c-ad09-d91f7d9f78a3)
- [IAM policies that allow full "*:*" administrative privileges should not be created](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/1d08b362-7e24-46b0-bed1-4a6c1d1526a5)

Resource Type: microsoft.security/awsresources
--------------------------------------------------
New Advisor Recommendations:
- [Containers running in AWS should not include compromised packages](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/a6831722-6224-4596-9e9b-877600edeba8)
- [Container images in AWS registry should not include compromised packages](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/c8c8e051-14b4-4d21-a336-992ebf619475)

Resource Type: microsoft.security/gcpresources
--------------------------------------------------
New Advisor Recommendations:
- [Containers running in GCP should not include compromised packages](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/1a59e58d-36b6-4ab6-98bf-3fc4f91f232c)
- [Container images in GCP registry should not include compromised packages](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/90c4e1b8-b88e-4cdd-973a-7efb431a9903)

Resource Type: microsoft.security/securityconnectors/devops/azuredevopsorgs/projects/repos
--------------------------------------------------
New Advisor Recommendations:
- [Azure DevOps repositories should have Shai-Hulud 2.0 compromised packages findings resolved](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/70f5bbd7-c8bd-4b6f-a877-fa46b2719606)

Resource Type: microsoft.security/securityconnectors/devops/githubowners/repos
--------------------------------------------------
New Advisor Recommendations:
- [GitHub repositories should have Shai-Hulud 2.0 compromised packages findings resolved](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/14c00325-f0ee-4c12-bbaf-4059647d919c)

Contributor guide

No contributing guide indexed for this repository

Research direction

The issue names no repository files, tests, or entry points. Start by locating the data definitions for the listed Azure, AWS, and GCP resource types, then compare them with the linked Advisor and APRL recommendations. Done means the repository reflects the reported recommendation changes and its relevant validation passes.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, azure, gcp
Domain
cloud, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.