azure-openai-inference-response-content

Model responses can reproduce submitted sensitive content or generated credentials/code.

azurecritical service: azure:openai emits ContainsSecret

Where it sits

locationAzure OpenAI response.{choices,output,data,usage}
location kindoutput_value
data kindscredential password api_key access_key secret_key oauth_token connection_string source_code_secret sensitive_data pii customer_data
emits edgeContainsSecret
serviceAzure OpenAI / AI Services (azure:openai)

Collection recipe

access modedata_plane
operationPOST deployment inference operation
response path{choices,output,data}
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action

References

move · open · esc close