Azure / Azure/azure-cli-extensions

[acrcssc] Tasks fail to trigger when DNL is enabled for the container registry

Open
#9,512 3 comments 0 reactions 0 assignees View on GitHub
bug Container Registry Service Attention
Dominant language
Python
Stars
454
Forks
1.7k
Avg merge
2d 19h
Merged PRs (30d)
64

Description

### Describe the bug

since ACR's CSSC tasks trigger other tasks (cssc-trigger-workflow -- launches --> cssc-scan-image task, for example) the tasks reference the registry name via Task's provided runtime variable.

In this case seems `{{.Run.Registry}}` is resolving to the DNL name (`-`) instead of just the registry resource name.

Since the DNL registry name contains dashes (`-`) and it is not the actual ARM resource name, any cli management plane command fails when triggered from the task

https://github.com/Azure/azure-cli-extensions/blob/c226f75d21f8b63aacd1cc2fb42c627c1ab2dcbb/src/acrcssc/azext_acrcssc/templates/task/cssc_trigger_workflow.yaml#L54

### Related command

`az acr supply-chain workflow`

### Errors

....
2026/01/09 21:20:01 Launching container with name: scan-and-schedule-patch
Tag Convention details: Configured Tag Convention:
Scheduling cssc-scan-image for /ubuntu-jammy, Tag:20240111, OriginalTag:20240111, PatchTag:20240111-1
**ERROR: Registry names may contain only alpha numeric characters and must be between 5 and 50 characters**
2026/01/09 21:20:02 Successfully executed container: scan-and-schedule-patch

### Issue script & Debug output

same as above

### Expected behavior

cssc extension should be able to trigger the necessary task regardless of DNL protection

### Environment Summary

az version
{
"azure-cli": "2.79.0",
"azure-cli-core": "2.79.0",
"azure-cli-telemetry": "1.1.0",
"extensions": {
"acrcssc": "1.0.0b5",
"ml": "2.39.0",
"ssh": "2.0.6"
}
}

### Additional context

minor side bug: the task step is marked as successful even though the command fails.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.