Microsoft guidance regarding credentials leaked to GitHub Actions Logs through Azure CLI

Summary Summary The Microsoft Security Response Center (MSRC) was made aware of a vulnerability where Azure Command-Line Interface (CLI) could expose sensitive information, including credentials, through GitHub Actions logs. The researcher, from Palo Alto’s Prisma Cloud, found that Azure CLI commands could be used to show sensitive data and output to Continuous Integration and Continuous Deployment (CI/CD) logs.

actions alto aware azure center cli cloud command credentials data expose found github github actions guidance information interface leaked logs microsoft microsoft security msrc palo palo alto prisma prisma cloud researcher response security sensitive sensitive data sensitive information vulnerability