Azure / Azure/azure-cli-extensions

Az storage azcopy blob download prints access key

Open
#6,226 1 comment 1 reaction 1 assignee Claimed by @evelyn-ys View on GitHub
Auto-Assign Azure CLI Team customer-reported feature-request Storage
Dominant language
Python
Stars
454
Forks
1.7k
Avg merge
2d 19h
Merged PRs (30d)
64

Description

-### Related command
az storage azcopy blob download

### Extension name (the extension in question)
az storage azcopy

### Description of issue
Running ```az storage azcopy blob download --container --source --destination ``` outputs an object called Namespace as shown in line 237 at https://github.com/Azure/azure-cli-extensions/blob/main/src/storage-preview/azext_storage_preview/_validators.py. This Namespace object prints out the values of sensitive secrets such as storage account access keys/ connection string.

Running this in a job will expose the secret to any individual that has access to the job. Can we please redact these secrets from being printed in output?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.