You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When using the new workload federation identity with the AzurePowerShell task the logging is logging the information from Connect-AzAccount which includes a partial FederatedToken. The token is a secret but it will only get ***'ed out if the string contains the full secret. PS is dumping the values in a table so part of it is getting removed but I fear there might be enough to try and brute force it.
See:
I've purpose cut off the value to only show a small portion.
Environment type (Please select at least one enviroment where you face this issue)
Self-Hosted
Microsoft Hosted
VMSS Pool
Container
Azure DevOps Server type
dev.azure.com (formerly visualstudio.com)
Azure DevOps Server Version (if applicable)
No response
Operation system
All
Relevant log output
Connect-AzAccount
Name Value
---- -----
Scope Process
FederatedToken <redacted>
Repro steps
No response
The text was updated successfully, but these errors were encountered:
New issue checklist
Task name
AzurePowerShellV5
Task version
5.239.9
Issue Description
When using the new workload federation identity with the AzurePowerShell task the logging is logging the information from Connect-AzAccount which includes a partial FederatedToken. The token is a secret but it will only get ***'ed out if the string contains the full secret. PS is dumping the values in a table so part of it is getting removed but I fear there might be enough to try and brute force it.
See:
I've purpose cut off the value to only show a small portion.
Environment type (Please select at least one enviroment where you face this issue)
Azure DevOps Server type
dev.azure.com (formerly visualstudio.com)
Azure DevOps Server Version (if applicable)
No response
Operation system
All
Relevant log output
Repro steps
No response
The text was updated successfully, but these errors were encountered: