Azure / Azure/azure-cli

Does not currently pass VHD scanning

Open
#31,491 2 comments 1 reaction 0 assignees View on GitHub
bug customer-reported Security-Issue
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

### Describe the bug

Transient dependency of the python azure-cli-core package on knack to pygments is resulting in a failed VHD scan when attempting to verify an image with azure. See the direct issue raised with pygments at: https://github.com/pygments/pygments/issues/2892

### Related command

az

### Errors

Malware detected on your VHD and the list of filenames includes (Malware detected on your VHD and the list of filenames includes (Image digestId: , File name: templates.cpython-312.pyc, Malware Information: Avira bitdefender ConfirmedMaliciousURL hXXps[:]//gizmojo[.]org/templating? ) .Please fix the issues with these files and resubmit the request

### Issue script & Debug output

az

### Expected behavior

Clean scan.

### Environment Summary

From pipdeptree:

├── azure-cli-core [required: ==2.72.0, installed: 2.72.0]
...
│ ├── knack [required: ~=0.11.0, installed: 0.11.0]
...
│ │ ├── Pygments [required: Any, installed: 2.19.1]

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.