azure-devops-build-release-logs

Build and release logs may contain expanded variables, command lines, access tokens, or deployment output.

azurecritical service: azure:devops emits ContainsSecret

Where it sits

locationAzure Pipelines build/release log content
location kindlog_field
data kindscredential password api_key access_key secret_key oauth_token connection_string sensitive_data pii customer_data
emits edgeContainsSecret
serviceAzure DevOps (azure:devops)

Collection recipe

access modedata_plane
operationBuilds - Get Build Log
response path$value
encodingstring
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

vso.build

References

move · open · esc close