@codemod/azure-arm-and-pipelines-bundle
Workflow-only bundle that runs all 17 Azure-related codemods returned by npx codemod search azure at creation time.
This package does not implement a new standalone source transform. It orchestrates the published child packages in workflow order so the bundle can be reused in direct CLI runs or campaigns.
Usage
For local workflow development:
Execution order is the workflow order defined in workflow.yaml.
Included Child Packages
@codemod/azure-pipelines-lock-swift-deps(transformation)@codemod/azure-pipelines-task-param-injection(read-only analysis/mining)@codemod/azure-pipelines-script-injection-audit(read-only analysis/mining)@codemod/azure-pipelines-pin-external-task-version(read-only analysis/mining)@codemod/arm-rbac-disabled-detection(read-only analysis/mining)@codemod/arm-detect-missing-managed-identity(read-only analysis/mining)@codemod/arm-no-custom-role-owner-capabilities(read-only analysis/mining)@codemod/arm-detect-high-privilege-role-assigns(read-only analysis/mining)@codemod/arm-hardcoded-apiversion(transformation)@codemod/arm-client-cert-auth-endpoints(transformation)@codemod/arm-redundant-resource-dependson(transformation)@codemod/arm-duplicate-string-literals-s1192(read-only analysis/mining)@codemod/arm-public-network-access-disabled(read-only analysis/mining)@codemod/arm-storage-encryption-disabled(read-only analysis/mining)@codemod/arm-detect-weak-tls-protocols(read-only analysis/mining)@codemod/arm-role-assignment-broad-scope-audit(read-only analysis/mining)@codemod/arm-no-cleartext-protocols(read-only analysis/mining)
Some child codemods are read-only reporting or metrics packages, and some are file-transforming codemods. This bundle preserves them as independent workflow steps so step-level reporting remains intact in campaigns and workflow runs.
Development
pnpm test validates the local package and runs the full workflow against representative Azure Pipelines YAML and ARM JSON smoke fixtures copied to a temporary directory.
Notes
- Package type: workflow-only registry bundle
- Registry visibility: public
- Registry access: pro
- Intended targets: repositories containing Azure Pipelines YAML and/or Azure ARM JSON templates
License
MIT