Azure / Azure/PSRule.Rules.Azure

Check outputs potentially containing secure values

Open
#1,477 0 comments 0 reactions 0 assignees View on GitHub
integration: defender-for-devops pillar: security rule: deployment
Dominant language
PowerShell
Stars
447
Forks
109
Avg merge
2d 19h
Merged PRs (30d)
23

Description

# Rule request

## Suggested rule change

Check for outputs that are likely to contain secure values such as `accountPassword`.

## Applies to the following

The rule applies to the following:

- Resource type: **Microsoft.Resources/deployments**

## Additional context

[TTK test](https://github.com/Azure/arm-ttk/blob/master/arm-ttk/testcases/deploymentTemplate/Outputs-Must-Not-Contain-Secrets.test.ps1)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.