review-checklists
review-checklists copied to clipboard
Azure
This repo contains code and examples to operationalize spreadsheet-based checklists that can be used for Azure design reviews on multiple technologies.
Some typos in the Resource Graph query code makes resources show up as non-compliant even though they should be compliant and vice versa. It's regrading these two recommendations: "Enforce reasonably...
Processed changed files checklists/appsvc_security_checklist.en.json scripts/checklist_graph.sh
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "github-actions[bot] avatar"){kind=avatar}
By default, App Service will allow plain FTP uploads. There is an existing check that mentions the basic authentication, but not the protocol. ```json { "category": "Security", "subcategory": "Identity and...
Creating path based exclusions introduces unnecessary risk, and we really shouldn't be making this recommendation. Please consider removing this: https://github.com/Azure/review-checklists#unblock-file-or-add-an-exception-to-windows-security
Hi, I am trying to use checklist_graph.sh to get other technologies mentioned in the https://github.com/Azure/review-checklists/tree/main/checklists, in the script as of now only [lz|aks|avd] is mentioned others are not there. I...
Hi Team, I would like to request to include the resource graph queries in the security checklist, because I only saw --technology=lz|aks|avd .
We have errors running on the Github action resulting after a successful PR to the AVD checklist. For example: https://github.com/Azure/review-checklists/actions/runs/3180533115/attempts/3 The translation job typically run in under 2 minutes, but...
To better understand how often the review checklists are being used, we should track the download of JSON files in detail. These metrics can be used to detect trends in...
This recommendation "Enforce the use of reserved instances to prioritize reserved capacity in required regions. Then the workload will have the required capacity even when there's a high demand for...
Currently, when checklists are shared around, there is no indication of when the checklist content was imported. For example, if an XLSX file is being passed around to bypass client-side...
