Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

the same as here https://github.com/Azure/PSRule.Rules.Azure/issues/1762 #3185

Open
dariuszbz opened this issue Nov 25, 2024 · 1 comment
Open
Labels
bug Something isn't working integration: defender-for-devops New feature or request for ARM Template Best Practice Analyzer

Comments

@dariuszbz
Copy link

Existing rule

No response

Description of the issue

we run the ADO "task: Run Microsoft Defender for DevOps" and we get the error like here:

#1762

our module structure is the same and we call the module the same way and we are getting the same result as an error :)

Error messages

##[error]46. TemplateAnalyzer Error AZR-000316 - File: _(retracted)_servers.bicep. Line: 53. Column 0.
Signature: ca6f59d0885f4f6139b3f0b03700602a6c0f47e35599930e2c31872c614c37ce
Tool: TemplateAnalyzer: Rule: AZR-000316 (Azure.Deployment.SecureValue). https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.Deployment.SecureValue/
Azure Bicep and Azure Resource Manager (ARM) templates can be used to deploy resources to Azure. When deploying Azure resources, sensitive values such as passwords, certificates, and keys should be passed as secure parameters. Secure parameters use the secureString or secureObject type.
Parameters that do not use secure types are recorded in logs and deployment history. These values can be retrieved by anyone with access to the deployment history.

Reproduction

see: #1762

and run with ADO task: "Run Microsoft Defender for DevOps"

Version of PSRule

2.9.0

Version of PSRule for Azure

No response

Additional context

No response

@dariuszbz dariuszbz added bug Something isn't working Needs: Triage 🔍 Needs attention from the team. labels Nov 25, 2024
@BernieWhite BernieWhite removed the Needs: Triage 🔍 Needs attention from the team. label Nov 30, 2024
@BernieWhite
Copy link
Collaborator

Thanks for reporting the issue @dariuszbz. Are you able to provide the version of template analyzer you are running?

@BernieWhite BernieWhite added the integration: defender-for-devops New feature or request for ARM Template Best Practice Analyzer label Nov 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working integration: defender-for-devops New feature or request for ARM Template Best Practice Analyzer
Projects
None yet
Development

No branches or pull requests

2 participants