azure-batch-task-command-environment
Batch task command lines, environment values, and SAS-bearing file URLs may hold plaintext secrets.
Where it sits
| location | Batch Task.{commandLine,environmentSettings,resourceFiles,outputFiles} |
| location kind | command_argument |
| data kinds | credential password api_key access_key secret_key oauth_token connection_string source_code_secret |
| emits edge | ContainsSecret |
| service | Azure Batch (azure:batch) |
Collection recipe
| access mode | data_plane |
| operation | Task - Get |
| response path | {commandLine,environmentSettings,resourceFiles,outputFiles} |
| encoding | json |
| params | {"resource_id": "\u003cazure-resource-id\u003e"} |
Required permissions
Microsoft.Batch/batchAccounts/jobs/tasks/read
References