Bernie White

Results 291 issues of Bernie White

# Rule request ## Suggested rule change Ensures that all properties within a template named adminUsername are expressions, not literal strings ## Applies to the following The rule applies to...

help wanted
rule: deployment
integration: template-analyzer

# Rule request ## Suggested rule change Check for custom script cases that might expose a secret. Ensures that all `commandsToExecute` are within `protectedSettings` if the command contains a secure...

help wanted
rule: deployment
integration: template-analyzer

# Rule request ## Suggested rule change Check for outputs that are likely to contain secure values such as `accountPassword`. ## Applies to the following The rule applies to the...

rule: deployment
integration: defender-for-devops
pillar: security

# Rule request ## Suggested rule change Check that parameters that are likely to contain secure values use `secureString` or `secureObject`. For example parameters called `adminPassword` or `accountKey`. ## Applies...

rule: deployment
integration: template-analyzer
pillar: security

Experimental support for strong typing of modules supports a `resourceType` metadata property on parameters and outputs. We currently provide similar support via `strongType` metadata but `resourceType` should be added. ##...

enhancement
feature: bicep-language

# Rule request ## Suggested rule change Azure Front Door, Application Gateway and Azure CDN support linking of WAF policies. We should ensure any WAF policy rules are added for...

rule: network
ms-hack-2022

Some templates may not have any parameters or any required parameters particularly if they are built from bicep. Currently PSRule for Azure will only automatically from CI expands from parameter...

enhancement

We could do better clearly answering these questions in documentation: - [ ] What's the different between `ps-rule.yaml` and baselines? - [ ] Can baselines and `ps-rule.yaml` be used together?...

documentation
long-term

Currently PSRule for Azure implements it's own expansion code to resolve templates dynamically at runtime. At the time when PSRule for Azure implemented these features, no other libraries where available...

enhancement

Bicep integration currently uses the Bicep CLI which needs to be installed. Investigate if it is possible to use the `Azure.Bicep.Core` package instead which previously did not contain the ability...

enhancement