Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG]: AzurePowerShellV5 task is logging partial federatedToken #19869

Closed
1 of 7 tasks
weshaggard opened this issue May 14, 2024 · 0 comments
Closed
1 of 7 tasks

[BUG]: AzurePowerShellV5 task is logging partial federatedToken #19869

weshaggard opened this issue May 14, 2024 · 0 comments

Comments

@weshaggard
Copy link
Member

weshaggard commented May 14, 2024

New issue checklist

Task name

AzurePowerShellV5

Task version

5.239.9

Issue Description

When using the new workload federation identity with the AzurePowerShell task the logging is logging the information from Connect-AzAccount which includes a partial FederatedToken. The token is a secret but it will only get ***'ed out if the string contains the full secret. PS is dumping the values in a table so part of it is getting removed but I fear there might be enough to try and brute force it.

See:
image
I've purpose cut off the value to only show a small portion.

Environment type (Please select at least one enviroment where you face this issue)

  • Self-Hosted
  • Microsoft Hosted
  • VMSS Pool
  • Container

Azure DevOps Server type

dev.azure.com (formerly visualstudio.com)

Azure DevOps Server Version (if applicable)

No response

Operation system

All

Relevant log output

Connect-AzAccount 
Name                           Value
----                           -----
Scope                          Process
FederatedToken                 <redacted>

Repro steps

No response

@weshaggard weshaggard added the bug label May 14, 2024
@v-schhabra v-schhabra added Area:RM RM task team awaiting deployment Related changes are waiting for deployment to be completed labels May 19, 2024
@v-schhabra v-schhabra removed the awaiting deployment Related changes are waiting for deployment to be completed label May 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants