azure-batch-task-command-environment

Batch task command lines, environment values, and SAS-bearing file URLs may hold plaintext secrets.

azurecritical service: azure:batch emits ContainsSecret

Where it sits

locationBatch Task.{commandLine,environmentSettings,resourceFiles,outputFiles}
location kindcommand_argument
data kindscredential password api_key access_key secret_key oauth_token connection_string source_code_secret
emits edgeContainsSecret
serviceAzure Batch (azure:batch)

Collection recipe

access modedata_plane
operationTask - Get
response path{commandLine,environmentSettings,resourceFiles,outputFiles}
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Batch/batchAccounts/jobs/tasks/read

References

move · open · esc close