azure-acr-admin-credentials

When the admin user is enabled, listCredentials returns long-lived registry passwords.

azurecritical service: azure:acr emits ExposesCredential

Where it sits

locationMicrosoft.ContainerRegistry/registries/listCredentials response.{username,passwords[].value}
location kindsecret_value
data kindscredential password
emits edgeExposesCredential
serviceContainer Registry (azure:acr)

Collection recipe

access moderead_api
operationRegistries - List Credentials
response path{username,passwords[].value}
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.ContainerRegistry/registries/listCredentials/action

References

move · open · esc close