azure-devops-personal-access-token-create-response

A newly created PAT is returned once and can leak from UI, automation, or logs.

azurecritical service: azure:devops emits ExposesCredential

Where it sits

locationAzure DevOps PAT create response.patToken.token
location kindoutput_value
data kindscredential access_key bearer_token
emits edgeExposesCredential
serviceAzure DevOps (azure:devops)

Collection recipe

access modecreation_response_only
operationPersonal Access Tokens - Create
response pathpatToken.token
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

vso.pats

References

move · open · esc close