Ccodemod

codemod/azure-security-bundle

Name: azure-security-bundle codemod
Availability: InStock

Workflow-only bundle for Azure Pipelines and ARM security codemods

BundlePublic

azuresecurityazure-pipelinesarmbundleworkflow-only

PublicBundle

0 executions

Run locally

npx codemod @codemod/azure-security-bundle

v0.0.2@codemod/azure-pipelines-lock-swift-depsv0.1.0Workflow default · Azure Pipelines: lock Swift deps
v0.0.2@codemod/arm-rbac-disabled-detectionv0.1.0Workflow default · ARM: RBAC disabled detection
v0.0.2@codemod/arm-detect-missing-managed-identityv0.1.0Workflow default · ARM: missing managed identity
v0.0.2@codemod/arm-no-custom-role-owner-capabilitiesv0.1.0Workflow default · ARM: custom role owner capabilities
v0.0.2@codemod/arm-detect-high-privilege-role-assignsv0.1.0Workflow default · ARM: high-privilege role assignments
v0.0.2@codemod/arm-public-network-access-disabledv0.1.0Workflow default · ARM: public network access disabled
v0.0.2@codemod/arm-storage-encryption-disabledv0.1.0Workflow default · ARM: storage encryption disabled
v0.0.2@codemod/arm-role-assignment-broad-scope-auditv0.1.0Workflow default · ARM: role assignment broad scope audit
v0.0.2@codemod/azure-pipelines-task-param-injectionv0.1.1Workflow default · Azure Pipelines: task parameter injection
v0.0.2@codemod/azure-pipelines-pin-external-task-versionv0.1.1Workflow default · Azure Pipelines: pin external task version
v0.0.2@codemod/arm-detect-weak-tls-protocolsv0.1.1Workflow default · ARM: weak TLS protocols
v0.0.2@codemod/azure-pipelines-script-injection-auditv0.1.1Workflow default · Azure Pipelines: script injection audit
v0.0.2@codemod/arm-no-cleartext-protocolsv0.1.0Workflow default · ARM: no cleartext protocols
v0.0.2@codemod/arm-hardcoded-apiversionv0.1.0Workflow default · ARM: hardcoded apiVersion
v0.0.2@codemod/arm-client-cert-auth-endpointsv0.1.0Workflow default · ARM: require client cert auth endpoints
v0.0.2@codemod/arm-redundant-resource-dependsonv0.1.0Workflow default · ARM: remove redundant dependsOn
v0.0.2@codemod/arm-duplicate-string-literals-s1192v0.1.1Workflow default · ARM: duplicate string literals
v0.0.1@codemod/azure-pipelines-lock-swift-depsv0.1.0Workflow default · Azure Pipelines: lock Swift deps
v0.0.1@codemod/arm-rbac-disabled-detectionv0.1.0Workflow default · ARM: RBAC disabled detection
v0.0.1@codemod/arm-detect-missing-managed-identityv0.1.0Workflow default · ARM: missing managed identity
v0.0.1@codemod/azure-pipelines-pin-external-task-versionv0.1.1Workflow default · Azure Pipelines: pin external task version
v0.0.1@codemod/azure-pipelines-script-injection-auditv0.1.1Workflow default · Azure Pipelines: script injection audit
v0.0.1@codemod/arm-no-custom-role-owner-capabilitiesv0.1.0Workflow default · ARM: custom role owner capabilities
v0.0.1@codemod/arm-detect-high-privilege-role-assignsv0.1.0Workflow default · ARM: high-privilege role assignments
v0.0.1@codemod/arm-public-network-access-disabledv0.1.0Workflow default · ARM: public network access disabled
v0.0.1@codemod/arm-storage-encryption-disabledv0.1.0Workflow default · ARM: storage encryption disabled
v0.0.1@codemod/arm-role-assignment-broad-scope-auditv0.1.0Workflow default · ARM: role assignment broad scope audit
v0.0.1@codemod/arm-no-cleartext-protocolsv0.1.0Workflow default · ARM: no cleartext protocols
v0.0.1@codemod/arm-hardcoded-apiversionv0.1.0Workflow default · ARM: hardcoded apiVersion
v0.0.1@codemod/arm-client-cert-auth-endpointsv0.1.0Workflow default · ARM: require client cert auth endpoints
v0.0.1@codemod/arm-redundant-resource-dependsonv0.1.0Workflow default · ARM: remove redundant dependsOn
v0.0.1@codemod/arm-duplicate-string-literals-s1192v0.1.1Workflow default · ARM: duplicate string literals
v0.0.1@codemod/arm-detect-weak-tls-protocolsv0.1.1Workflow default · ARM: weak TLS protocols
v0.0.1@codemod/azure-pipelines-task-param-injectionv0.1.1Workflow default · Azure Pipelines: task parameter injection

Ready to contribute?

Build your own codemod and share it with the community.

Registry

Ready to contribute?

Run locally

Ready to contribute?