@codemod/azure-arm-and-pipelines-bundle

Name: azure-arm-and-pipelines-bundle codemod
Availability: InStock

Workflow-only bundle that runs all 17 Azure-related codemods returned by npx codemod search azure at creation time.

This package does not implement a new standalone source transform. It orchestrates the published child packages in workflow order so the bundle can be reused in direct CLI runs or campaigns.

Usage

bash
npx codemod @codemod/azure-arm-and-pipelines-bundle --target <path>

For local workflow development:

bash
pnpm dlx codemod@latest workflow run -w . -t <path>

Execution order is the workflow order defined in workflow.yaml.

Included Child Packages

@codemod/azure-pipelines-lock-swift-deps (transformation)
@codemod/azure-pipelines-task-param-injection (read-only analysis/mining)
@codemod/azure-pipelines-script-injection-audit (read-only analysis/mining)
@codemod/azure-pipelines-pin-external-task-version (read-only analysis/mining)
@codemod/arm-rbac-disabled-detection (read-only analysis/mining)
@codemod/arm-detect-missing-managed-identity (read-only analysis/mining)
@codemod/arm-no-custom-role-owner-capabilities (read-only analysis/mining)
@codemod/arm-detect-high-privilege-role-assigns (read-only analysis/mining)
@codemod/arm-hardcoded-apiversion (transformation)
@codemod/arm-client-cert-auth-endpoints (transformation)
@codemod/arm-redundant-resource-dependson (transformation)
@codemod/arm-duplicate-string-literals-s1192 (read-only analysis/mining)
@codemod/arm-public-network-access-disabled (read-only analysis/mining)
@codemod/arm-storage-encryption-disabled (read-only analysis/mining)
@codemod/arm-detect-weak-tls-protocols (read-only analysis/mining)
@codemod/arm-role-assignment-broad-scope-audit (read-only analysis/mining)
@codemod/arm-no-cleartext-protocols (read-only analysis/mining)

Some child codemods are read-only reporting or metrics packages, and some are file-transforming codemods. This bundle preserves them as independent workflow steps so step-level reporting remains intact in campaigns and workflow runs.

Development

bash
pnpm test
pnpm run validate

pnpm test validates the local package and runs the full workflow against representative Azure Pipelines YAML and ARM JSON smoke fixtures copied to a temporary directory.

Notes

Package type: workflow-only registry bundle
Registry visibility: public
Registry access: pro
Intended targets: repositories containing Azure Pipelines YAML and/or Azure ARM JSON templates

License

MIT