Ccodemod

codemod/arm-detect-prod-debug-settings

Disable production-unsafe ARM template debug settings in JSON templates and embedded JS/TS object literals by turning verbose deployment diagnostics and app-service tracing flags into safe production defaults.

armazurejsontransformationproduction-hardening
Public
0 executions
Apply to Repository

Run locally

npx codemod @codemod/arm-detect-prod-debug-settings

@codemod/arm-detect-prod-debug-settings

Disable production-unsafe debug settings in Azure Resource Manager (ARM) templates and embedded ARM resource objects.

Installation

bash

Usage

This codemod rewrites ARM deployment templates and embedded ARM object literals when they contain resource-template markers such as $schema, resources, apiVersion, or ARM resource type values.

It makes these source rewrites:

  • debugSetting.detailLevel -> "none"
  • debugSetting.enabled -> false
  • detailedErrorLoggingEnabled -> false
  • failedRequestTracingEnabled -> false
  • httpLoggingEnabled -> false
  • remoteDebuggingEnabled -> false
  • requestTracingEnabled -> false

Targeted files:

  • .json ARM templates
  • .js, .mjs, .cjs, .ts, .jsx, .tsx files that embed ARM template/resource objects

Preserve/no-op cases:

  • Non-ARM JSON or object literals with similarly named keys stay unchanged
  • Settings already at safe values stay unchanged
  • Unrelated local variables such as const requestTracingEnabled = true stay unchanged

Example:

json

becomes:

json

Development

bash

License

MIT

Ready to contribute?

Build your own codemod and share it with the community.

Publish a codemodJoin the community