azure-functions

This is ordinary Azure infrastructure-as-code for deploying an Azure Function and its supporting services. It does not show indicators of malware or intentional supply-chain sabotage. The primary security issue is credential handling: a database password is hardcoded in source, and multiple sensitive Azure credentials are managed through Terraform attributes and Function App settings, causing potential exposure through source control, Terraform state, or platform configuration. Protect Terraform state, rotate the exposed password if it has been used, and provide secrets through a secure workflow such as a protected variable or externally managed Key Vault secret. Consider reducing Key Vault permissions to the minimum required.