Microsoft guidance regarding credentials leaked to GitHub Actions Logs through Azure CLI

  • Thread starter Thread starter MSRC
  • Start date Start date
M

MSRC

Summary The Microsoft Security Response Center (MSRC) was made aware of a vulnerability where Azure Command-Line Interface (CLI) could expose sensitive information, including credentials, through GitHub Actions logs. The researcher, from Palo Alto Networks Prisma Cloud, found that Azure CLI commands could be used to show sensitive data and output to Continuous Integration and Continuous Deployment (CI/CD) logs.

Continue reading...
 
Back
Top